Static task
static1
Behavioral task
behavioral1
Sample
2829b25d63ed6d05a9ae11e1ed00d712_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2829b25d63ed6d05a9ae11e1ed00d712_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2829b25d63ed6d05a9ae11e1ed00d712_JaffaCakes118
-
Size
17KB
-
MD5
2829b25d63ed6d05a9ae11e1ed00d712
-
SHA1
c39dc718270e28e8593e88d41a1edb3a30952c01
-
SHA256
cf61003c19d34fd9b94158504e68092beec49ced835d4ca9016fb57a6d38f988
-
SHA512
1439324f4bf9ff27b3a9c631e77dd0507630efb83668a3c80b8203a37a6dc8d7e39851307147da78cfa642c2ed442e2aef8d088d1466f8093f706cbb36c1a32b
-
SSDEEP
192:6hOsuD5nGn7OPogKI9MLDDG/mDMHIP8DXhNCN5rb7SbU2GWBMa3Jaw1:GOX07OwgfqDDImQl6bApGkZaw1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2829b25d63ed6d05a9ae11e1ed00d712_JaffaCakes118
Files
-
2829b25d63ed6d05a9ae11e1ed00d712_JaffaCakes118.exe windows:4 windows x86 arch:x86
0001df2ae3e90c7f675e3bda2321e1d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GlobalUnlock
InterlockedExchange
LocalSize
WaitForMultipleObjects
HeapCreate
CloseHandle
GetSystemDefaultLangID
HeapReAlloc
GetAtomNameA
GetTickCount
GetVersion
GetConsoleDisplayMode
CompareFileTime
GetCommandLineA
GetConsoleCP
SuspendThread
lstrlenA
GetModuleHandleA
VirtualProtect
LoadLibraryExA
gdi32
GetRgnBox
EngLineTo
Escape
DeleteObject
BeginPath
CreateFontA
GetMetaFileA
AbortPath
EndPath
GetMetaRgn
FloodFill
GetTextColor
Ellipse
EqualRgn
GetStringBitmapA
CreatePalette
GetFontData
DeleteDC
CreateICA
rastapi
DeviceDone
DeviceConnect
AddPorts
DeviceListen
PortClose
dhcpsapi
DhcpAddServer
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ