Static task
static1
Behavioral task
behavioral1
Sample
2deb5a9f821b0e6e3bead2e293e12939_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2deb5a9f821b0e6e3bead2e293e12939_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2deb5a9f821b0e6e3bead2e293e12939_JaffaCakes118
-
Size
317KB
-
MD5
2deb5a9f821b0e6e3bead2e293e12939
-
SHA1
bd12198ff9d06c5cb54f97a5d3063a3e0ea56742
-
SHA256
6f5f744b8c5e706d82812bb3ff2df1f279ee2c921d63d48aacf2284e41aac9f6
-
SHA512
f2c4fa545c0e35eb032a51c53d5686020c792b6448561ace99772f9c0a5ffc6b82d5b7b062398c5d8da167036f3ea1516c0be12ff6879e8fc0617eb48f95958f
-
SSDEEP
6144:XTvERPh5qe7/JFB7XYdjSYGioU8DmiUtH:XQRP2e7/JFTD1UtH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2deb5a9f821b0e6e3bead2e293e12939_JaffaCakes118
Files
-
2deb5a9f821b0e6e3bead2e293e12939_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbaf93a164cfcd2f726aded608352c10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
LocalFree
LoadResource
VirtualAlloc
GetOEMCP
GlobalFindAtomA
GetStdHandle
RaiseException
SetCommBreak
GlobalAddAtomA
GetProfileStringA
lstrcat
SetConsolePalette
GetProcessHeap
GlobalFree
GlobalLock
DeleteAtom
CloseHandle
EnterCriticalSection
HeapCreate
GlobalUnlock
user32
GetClassNameA
GetDC
GetFocus
DrawEdge
CloseWindow
EndPaint
GetActiveWindow
AlignRects
GetWindowTextA
GetWindowTextLengthA
ValidateRect
GetForegroundWindow
GetClassInfoExA
GetWindow
GetParent
ShowWindow
IsIconic
ReleaseDC
BeginPaint
wsock32
WSAStartup
WSAGetLastError
WSAAsyncGetServByPort
WSACleanup
WSASetBlockingHook
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ