Static task
static1
Behavioral task
behavioral1
Sample
2ee100f33ce5be1c49cb35854b6f3bda_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ee100f33ce5be1c49cb35854b6f3bda_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ee100f33ce5be1c49cb35854b6f3bda_JaffaCakes118
-
Size
374KB
-
MD5
2ee100f33ce5be1c49cb35854b6f3bda
-
SHA1
dc663fe5300b095d3448b4fb6d5c2a07061781ab
-
SHA256
ca69c7223b393fd8174aedea1d7f55e8684dbad4c384c3d12e2e220a9dcb7503
-
SHA512
76768aaf17397c0547f3b3406010ff35fe0f2564f2bc17e97a65ec2ba8346a8c8121bba20c6189d86218f78a6a46f8564aaa06bce94c3bc19343cabecb916d4d
-
SSDEEP
6144:0E7PkhSy6RZTUJDJ+fiAunbmzQnFiCnC56vUw27WZYfjLILebw6Z9OimK:5PjxVUJDclkFiGugPZ6k5Gl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ee100f33ce5be1c49cb35854b6f3bda_JaffaCakes118
Files
-
2ee100f33ce5be1c49cb35854b6f3bda_JaffaCakes118.exe windows:4 windows x86 arch:x86
636581434f4487cca5cb870a980f8583
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SafeArrayGetUBound
SafeArrayCreate
VariantCopyInd
SafeArrayGetElement
SysFreeString
GetErrorInfo
SysStringLen
user32
GetClassInfoA
SetCapture
SystemParametersInfoA
DestroyIcon
GetCursor
wsprintfA
SetWindowLongW
GetMenu
CreateWindowExA
CallNextHookEx
CreatePopupMenu
EnableScrollBar
GetWindowRect
FrameRect
TrackPopupMenu
SetForegroundWindow
ActivateKeyboardLayout
LoadKeyboardLayoutA
MessageBeep
EnableWindow
SetPropA
GetKeyboardType
SetScrollRange
InsertMenuItemA
ClientToScreen
DrawMenuBar
GetSysColor
InflateRect
SetWindowLongA
ScreenToClient
ShowWindow
IsWindowVisible
LoadBitmapA
IsChild
IntersectRect
GetTopWindow
PostQuitMessage
InsertMenuA
GetPropA
RedrawWindow
ReleaseDC
DrawIcon
KillTimer
GetKeyState
EnumWindows
WaitMessage
LoadCursorA
SetScrollPos
ChildWindowFromPoint
CharNextW
CharToOemA
IsWindowUnicode
TranslateMessage
GetIconInfo
GetParent
GetKeyNameTextA
DefFrameProcA
GetDlgItem
GetMenuState
OffsetRect
GetClipboardData
SetWindowTextA
RegisterClipboardFormatA
GetClientRect
PeekMessageW
SetFocus
GetFocus
GetMessagePos
DestroyWindow
PeekMessageA
GetDCEx
RemovePropA
EnableMenuItem
DrawAnimatedRects
CharNextA
DefMDIChildProcA
DispatchMessageA
SendMessageA
GetScrollPos
IsDialogMessageA
GetWindowDC
GetActiveWindow
GetSystemMenu
comctl32
ImageList_Create
ImageList_Destroy
ImageList_Remove
ImageList_DragShowNolock
ImageList_Read
ImageList_Draw
ImageList_Add
ImageList_Write
kernel32
VirtualAllocEx
ExitProcess
GetProcAddress
GetVersionExA
IsBadHugeReadPtr
ExitThread
LoadLibraryExA
GlobalAlloc
LoadLibraryA
LocalAlloc
GetModuleHandleA
VirtualAlloc
GetCommandLineA
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 303KB - Virtual size: 302KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES5 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES1 Size: 512B - Virtual size: 458B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES7 Size: 1024B - Virtual size: 785B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES8 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ