Static task
static1
Behavioral task
behavioral1
Sample
2eac18243760046c3a22b1fdfb034d83_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2eac18243760046c3a22b1fdfb034d83_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2eac18243760046c3a22b1fdfb034d83_JaffaCakes118
-
Size
65KB
-
MD5
2eac18243760046c3a22b1fdfb034d83
-
SHA1
11fb43fc7a473d99508639dcd59752be2bda78c9
-
SHA256
1ed9af5d0d98ec395370f1c47b7d4a6721f3985dfc5cdcb57424d4d3a5f04489
-
SHA512
5bae60350e12c444f3991ab78d3173d2acd7e2f15ac362ca08fe4065bfd0d777b679d9358ebcf4a9d1daecf99eee3e36b511f6000a8728fb052e9bebf972557e
-
SSDEEP
1536:eF9isf6LrZmFndSf6I5vfaUFGV7TuPUzOLslokqw:eOQdSSI5vCUwVXuPgO3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eac18243760046c3a22b1fdfb034d83_JaffaCakes118
Files
-
2eac18243760046c3a22b1fdfb034d83_JaffaCakes118.exe windows:5 windows x86 arch:x86
d822ec60d9f59eb7c5de4e89adce7d7a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetLastError
LoadLibraryA
user32
CheckRadioButton
CreateWindowExW
DefWindowProcW
DialogBoxParamW
DrawFocusRect
EnableMenuItem
EndDialog
FrameRect
GetDC
GetDlgItem
GetDlgItemTextW
CharUpperBuffW
GetWindowLongW
IsCharAlphaW
IsDlgButtonChecked
LoadCursorW
LoadStringW
MessageBoxW
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
SetWindowLongW
TranslateAcceleratorW
UnhookWindowsHookEx
CallWindowProcW
GetKeyState
advapi32
RegOpenKeyA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52361 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52362 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52363 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52364 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52365 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52366 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52367 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data67 Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ