Static task
static1
Behavioral task
behavioral1
Sample
2fba3d0863c54c505050d8a399d50db8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2fba3d0863c54c505050d8a399d50db8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2fba3d0863c54c505050d8a399d50db8_JaffaCakes118
-
Size
2.1MB
-
MD5
2fba3d0863c54c505050d8a399d50db8
-
SHA1
319c507aa1d8992482978daa0b4b35d1cddaa4aa
-
SHA256
e51710522473bd8d093a32e3ab25c3d1b45fae6e7497238aa60cd399ff78936e
-
SHA512
28fe9503ebee30299c7f73584244c15f534ef35450dbf5ac424ae0613696e00912ccdedc2aa92f7b33bd0dceff2f61996fa7c276a89f2cf2defd4c9e9b3a6403
-
SSDEEP
49152:nW/QdykpBQ5WRD++sYIw9jqa/66CSe6wuv/Tvl:KwZdRDaW9jqa7Te6wY/J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fba3d0863c54c505050d8a399d50db8_JaffaCakes118
Files
-
2fba3d0863c54c505050d8a399d50db8_JaffaCakes118.exe windows:4 windows x86 arch:x86
960c8c43aaa17b4f99c3d47e72a46d2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
GetModuleFileNameA
CloseHandle
CreateProcessA
WritePrivateProfileStringA
lstrcatA
GetDiskFreeSpaceA
lstrlenA
CreateDirectoryA
lstrcmpA
GetPrivateProfileStringA
lstrcmpiA
_lread
_lwrite
_lcreat
_llseek
_lclose
_lopen
GetSystemDefaultLangID
GetTempPathA
lstrcpyA
ExitProcess
GetVersion
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetStringTypeW
HeapDestroy
FreeEnvironmentStringsW
FreeEnvironmentStringsA
WideCharToMultiByte
GetCurrentProcess
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetEnvironmentStrings
TerminateProcess
UnhandledExceptionFilter
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
user32
RegisterClassA
RegisterClassExA
wsprintfA
DefWindowProcA
MessageBoxA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetDesktopWindow
GetWindowRect
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
LoadIconA
LoadCursorA
PostQuitMessage
gdi32
SetBkMode
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ