Static task
static1
Behavioral task
behavioral1
Sample
2e3878e5ce34bf87dfabc44773666a10_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e3878e5ce34bf87dfabc44773666a10_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e3878e5ce34bf87dfabc44773666a10_JaffaCakes118
-
Size
68KB
-
MD5
2e3878e5ce34bf87dfabc44773666a10
-
SHA1
21f26004d0b16de7997e3b7a55ebb009d03a5384
-
SHA256
96a878e3602fb2e6cf9c4aaf0615884cbfc9a4d5820dcec70c75a62e775886b5
-
SHA512
2cefdce8f13e39707947cedcb081bca0cbd2f7329e0835bac17b1e53ce29c0af9c6684a12d52d7c97329f0901c3ce2c5dd4091ed57d57d46402a10baadc5b60d
-
SSDEEP
768:AnVxWLpAwYAD8BXgQvkigfOr5m6WlgvAkB7ZKIIDaOOzP4uFYWYo9gWMLZR39:AnVxVwYAQBoP65vAkDKIIOHF/zyR3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e3878e5ce34bf87dfabc44773666a10_JaffaCakes118
Files
-
2e3878e5ce34bf87dfabc44773666a10_JaffaCakes118.exe windows:4 windows x86 arch:x86
447ccd42d1209f5dde9aeb0d6f9f3cbc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadConsoleA
ReadConsoleA
ReadConsoleA
lstrcpyA
InitializeCriticalSection
GetLastError
ReadFile
CreateMutexA
IsBadStringPtrW
lstrcatA
FindResourceA
GetModuleHandleA
SetFileAttributesA
HeapCreate
GetStartupInfoW
GetCurrentDirectoryW
GetLocalTime
FormatMessageA
LeaveCriticalSection
GetFileSize
CloseHandle
msi
MsiAdvertiseProductA
MsiCloseHandle
MsiCreateRecord
MsiCloseAllHandles
user32
IsZoomed
GetWindowLongW
SetFocus
GetWindowTextA
SetCursorPos
IsCharLowerA
wsprintfW
DispatchMessageA
LoadCursorW
IsWindow
PostMessageW
PeekMessageW
IsDialogMessageA
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 178B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE