Static task
static1
Behavioral task
behavioral1
Sample
2ad80644e7757bf09118c945ec6c3266_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ad80644e7757bf09118c945ec6c3266_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ad80644e7757bf09118c945ec6c3266_JaffaCakes118
-
Size
160KB
-
MD5
2ad80644e7757bf09118c945ec6c3266
-
SHA1
0b64153f5f6e55f26347bcd9264d5d23cfb3ce63
-
SHA256
5cdc1944d7d390cea2284b3b15e89a593c82ca7c3424aa788a8985bd3f6c6eb6
-
SHA512
52c95bfc762dfede6dc77b999076e206ac8c0337d77e183ade713eb6baded0ce57837d2e813f46609b07d149d706c6a597c92edbfa6e3f59d77f04707283d514
-
SSDEEP
1536:OcKVJoYQxcPXm2otBEPGQLAUuEpu1rnibS3koYLcvLYd:gVJoYQee2kBEbLAUkWb2kogcv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ad80644e7757bf09118c945ec6c3266_JaffaCakes118
Files
-
2ad80644e7757bf09118c945ec6c3266_JaffaCakes118.exe windows:4 windows x86 arch:x86
f20cd7d3907b1f6c1c0fe333366b9e6d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetCompressedFileSizeA
ReadFile
CreateFileA
DeviceIoControl
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
LocalFree
SetEndOfFile
SetStdHandle
IsBadCodePtr
Sleep
GetLastError
GetModuleFileNameA
CreateDirectoryA
GetFileAttributesA
DeleteFileA
CreateProcessA
WaitForSingleObject
CloseHandle
CopyFileA
CreateFileMappingA
SetFileAttributesA
LoadLibraryA
GetProcAddress
GetVersionExA
FreeLibrary
GetWindowsDirectoryA
lstrlenA
IsBadReadPtr
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetFilePointer
IsBadWritePtr
VirtualAlloc
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
GetACP
GetOEMCP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
advapi32
RegisterServiceCtrlHandlerA
RegEnumValueA
SetServiceStatus
StartServiceCtrlDispatcherA
ControlService
DeleteService
StartServiceA
QueryServiceStatus
CreateServiceA
ChangeServiceConfig2A
RegCreateKeyA
RegSetValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeregisterEventSource
RegOpenKeyExA
RegCloseKey
ole32
CoUninitialize
CoGetClassObject
StringFromCLSID
CoInitialize
oleaut32
VariantClear
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE