Static task
static1
Behavioral task
behavioral1
Sample
2deb13b19f801e28fcb8c730057b7c3e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2deb13b19f801e28fcb8c730057b7c3e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2deb13b19f801e28fcb8c730057b7c3e_JaffaCakes118
-
Size
2.6MB
-
MD5
2deb13b19f801e28fcb8c730057b7c3e
-
SHA1
ca9cb9a605a0d6e5200711d2732411e1befaadc7
-
SHA256
ace7784ac1441b3d7dbc3f0b49fccd600a6326e2c67a4cc6897f6a45e368ac52
-
SHA512
ffab17740ddf899480f48afc686fdbe163ee92ed4a401cd88cf286aeb03b41c941ce5dd693051e9e883d2636fa5eefc36ddb152022287cd3c8f8c6a04823c20a
-
SSDEEP
49152:TNHTBnYgl4eKL0P/kfrk8n0Rky+U6LOAR4sTDSNvtuXmEdLXehpi5qOFhWd2qU6:F+glepoYCH6DDSNvuddrehpd2qU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2deb13b19f801e28fcb8c730057b7c3e_JaffaCakes118
Files
-
2deb13b19f801e28fcb8c730057b7c3e_JaffaCakes118.exe windows:5 windows x86 arch:x86
01e6b6459d52952078a9ab8a5be44793
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SendDlgItemMessageA
gdi32
MoveToEx
msimg32
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
RegQueryValueW
shell32
DragQueryFileW
comctl32
InitCommonControlsEx
shlwapi
PathFileExistsW
ws2_32
WSAAddressToStringA
oledlg
OleUIBusyW
ole32
CLSIDFromString
oleaut32
VariantTimeToSystemTime
gdiplus
GdipCloneImage
iphlpapi
GetAdaptersInfo
winmm
PlaySoundW
wininet
HttpSendRequestW
dbghelp
MiniDumpWriteDump
version
GetFileVersionInfoSizeW
imm32
ImmGetContext
Sections
.text Size: 2.6MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE