Static task
static1
Behavioral task
behavioral1
Sample
2e08fdf8f789c90bfff9b113dc7f363f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e08fdf8f789c90bfff9b113dc7f363f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e08fdf8f789c90bfff9b113dc7f363f_JaffaCakes118
-
Size
128KB
-
MD5
2e08fdf8f789c90bfff9b113dc7f363f
-
SHA1
7ab4d8dfb659f70977b3075e473129500d68346d
-
SHA256
dfd9ad376c078cb7485f7b87254e6d4932ca2c73b950f909e3a9ba2e64eef9f8
-
SHA512
6f8c9dab68cd1a5b3afcbf00ad6daeb09383ac87dc09f7fb5972cb63ce4c93117ede532b2869e34f1a6bd708944e72c6f41d1d5d68964803bfed2d715cb9dd2c
-
SSDEEP
768:HBsv7y7gMUXjHSeMeIUI0w+AFOEf1i8o53JUk9miIrlj/+fogleR:HIu7aXja3+AFO+I8o53JIroogleR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e08fdf8f789c90bfff9b113dc7f363f_JaffaCakes118
Files
-
2e08fdf8f789c90bfff9b113dc7f363f_JaffaCakes118.exe windows:4 windows x86 arch:x86
c5293af71737d53c0c5d5f2aa158328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
netapi32
Netbios
kernel32
GetComputerNameA
GetPrivateProfileStringA
GetEnvironmentStrings
GetFileType
HeapDestroy
CompareStringW
RtlUnwind
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
SetUnhandledExceptionFilter
GetLastError
CloseHandle
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetStdHandle
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
CompareStringA
SetEnvironmentVariableA
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetOEMCP
FlushFileBuffers
CreateFileA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetProcAddress
LoadLibraryA
SetEndOfFile
ReadFile
LCMapStringA
LCMapStringW
user32
MessageBoxA
advapi32
GetUserNameA
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 84KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE