Static task
static1
Behavioral task
behavioral1
Sample
2e346ac4c1e1d5a30b1596849b58eb04_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2e346ac4c1e1d5a30b1596849b58eb04_JaffaCakes118
-
Size
64KB
-
MD5
2e346ac4c1e1d5a30b1596849b58eb04
-
SHA1
748679856006b074c46ea284fac786b844e6a97b
-
SHA256
e7332cdffc12c9eb9fd82bd5b57f1eb90da834c20c58db1375c1ff7c1561e569
-
SHA512
59220cb05d33de71108e93773f00d169975607cd00b3ec380c97c2a38d7ec1908d8026f0982ed0b164d2e37d8d34bad2c3b796afb1f7c9d475ed6882a34d1565
-
SSDEEP
1536:SVi/3Fk+7qCc/HaRHK2VS41MJETYrZi2jpnYkek7M9yJb:RQyRHK2VS4jUFReZoM9w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e346ac4c1e1d5a30b1596849b58eb04_JaffaCakes118
Files
-
2e346ac4c1e1d5a30b1596849b58eb04_JaffaCakes118.exe windows:4 windows x86 arch:x86
49018842badf63eb432019932ea24f2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetLogicalDrives
GlobalFindAtomA
SetConsoleInputExeNameA
OpenFileMappingW
WriteConsoleOutputCharacterA
MoveFileExW
GetCommandLineA
ExitVDM
SetDllDirectoryA
GetProcessVersion
PeekConsoleInputA
FatalAppExitW
GetCommProperties
ChangeTimerQueueTimer
UnlockFile
GetNumberOfConsoleMouseButtons
VirtualProtectEx
SetConsoleNumberOfCommandsA
GetVolumeNameForVolumeMountPointA
OpenSemaphoreA
ExitThread
GetTempPathA
GetConsoleCursorMode
VirtualAlloc
LoadLibraryExW
user32
GetSubMenu
MessageBoxTimeoutA
DefFrameProcA
SendNotifyMessageA
GetWindowTextLengthA
RedrawWindow
GetTabbedTextExtentA
EnumDesktopsA
GetClipboardViewer
DrawStateA
LoadLocalFonts
SetWindowPos
TabbedTextOutA
OemKeyScan
ChildWindowFromPointEx
CloseClipboard
GetGUIThreadInfo
SetWindowStationUser
GetParent
DefMDIChildProcA
SetCursorPos
RecordShutdownReason
GetUserObjectInformationA
FindWindowExW
DrawCaption
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 226KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ