Static task
static1
Behavioral task
behavioral1
Sample
2f0fb3983a68f678b504a4757547ad9e_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2f0fb3983a68f678b504a4757547ad9e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2f0fb3983a68f678b504a4757547ad9e_JaffaCakes118
-
Size
544KB
-
MD5
2f0fb3983a68f678b504a4757547ad9e
-
SHA1
fe269e92592e87d4f924fa7cc44d9b1581d7b94a
-
SHA256
c68727ff55097c624d71246266f7733c69219b2517b7f2597c4a48568637fd2e
-
SHA512
fa38df24fa7a5dc0380538d676b1881a6394e54af620cd3fe38f4a03f7f92a3fc720ad4ce9fb05c945943f870e18bb201800f786bc551e58c64d5360aba919a4
-
SSDEEP
12288:+Jq6PvStBfJ/3VOHI3ThnvpNzpbY/elcW0plV:Iq6PKtJ9MatnvpNzpc/et0plV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f0fb3983a68f678b504a4757547ad9e_JaffaCakes118
Files
-
2f0fb3983a68f678b504a4757547ad9e_JaffaCakes118.exe windows:5 windows x86 arch:x86
911b240dfae96b2035e86ffe19ccd4d0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
tapi32
lineGetDevCaps
lineInitializeExW
tapiGetLocationInfoW
lineGetLineDevStatusA
advapi32
RegSetKeySecurity
RegQueryInfoKeyA
SystemFunction012
RegSetValueExA
ReportEventA
AddAccessAllowedAce
GetTraceEnableLevel
RegDeleteValueW
DeleteAce
kernel32
VirtualQueryEx
GetPriorityClass
MoveFileWithProgressA
FreeLibrary
HeapReAlloc
GetStringTypeW
WaitForSingleObject
lstrcpyA
lstrcmpW
GetSystemTimeAsFileTime
VirtualAlloc
lstrcmpiA
GetVolumeInformationA
GetLongPathNameW
uxtheme
DrawThemeIcon
IsThemeActive
DrawThemeParentBackground
GetThemeBackgroundContentRect
GetThemeSysFont
GetThemeAppProperties
GetCurrentThemeName
OpenThemeData
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 490KB - Virtual size: 806KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 114B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ