Static task
static1
Behavioral task
behavioral1
Sample
2a1d884d69d0b7ec177fed48389be665_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a1d884d69d0b7ec177fed48389be665_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a1d884d69d0b7ec177fed48389be665_JaffaCakes118
-
Size
60KB
-
MD5
2a1d884d69d0b7ec177fed48389be665
-
SHA1
4620845596a62bfa87fa2f44186502c2c4907512
-
SHA256
09db2cf875212b6e166a9fede045534821b906e89298028a896800d429b42bd6
-
SHA512
b4f5a5b3f40aa71cb19d28ab60119e93eb2319fd72e7f5600febfd1644a267da14f64ecbbf44fd8517e5031574d333c4b8fa94ff98a5669df807eea48cc9ad40
-
SSDEEP
768:q8ntW+8sf78QCltv9mqx6TLgdsVWfVHA2aA+V53EljZ+185OEoKuZt:q8ntW+9j8QL6YUgA+H8roK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a1d884d69d0b7ec177fed48389be665_JaffaCakes118
Files
-
2a1d884d69d0b7ec177fed48389be665_JaffaCakes118.exe windows:4 windows x86 arch:x86
8024ffe1dd3adbcecb0cdc848036081b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetEnvironmentVariableW
GetProcAddress
LoadLibraryA
Process32Next
CloseHandle
Process32First
CreateToolhelp32Snapshot
GetVersionExA
HeapFree
HeapAlloc
TerminateThread
FileTimeToSystemTime
FileTimeToLocalFileTime
VirtualQueryEx
ReadProcessMemory
GetSystemInfo
OpenProcess
FlushFileBuffers
GetOEMCP
TerminateProcess
GetModuleFileNameA
GetShortPathNameA
GetEnvironmentVariableA
lstrcpyA
lstrcatA
SetPriorityClass
GetCurrentThread
SetThreadPriority
CreateProcessA
LocalFree
ResumeThread
GetCurrentProcess
GetLastError
Sleep
GetProcessHeap
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
SetFilePointer
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
user32
wsprintfA
ExitWindowsEx
advapi32
RegCreateKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
shell32
ShellExecuteA
netapi32
NetUserEnum
NetApiBufferFree
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE