Static task
static1
Behavioral task
behavioral1
Sample
2abbcbe9e1f02f0313c5f84a1ddabcfe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2abbcbe9e1f02f0313c5f84a1ddabcfe_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2abbcbe9e1f02f0313c5f84a1ddabcfe_JaffaCakes118
-
Size
148KB
-
MD5
2abbcbe9e1f02f0313c5f84a1ddabcfe
-
SHA1
eeb61ad0e60db3a65bb844b24b6568a5332490fa
-
SHA256
6663ae311593c5932d6b6552794c936f335fb263b78c430ec94fcc87f436f610
-
SHA512
984fe5bfb2d8da9d31cb65435be3c0ebb6ec6c78abe3ef52be858ae74698b5cd17d2726c363c14738d20f68064b8e3babb7fe15809285bd51521f677534da09a
-
SSDEEP
1536:WdJp7p/DlSZhmVyeNcmKfG+XbHlW4pbaCSGclVoLXJAwWPcWdRobKn6c0g1Z1:Wdn7p/UhmkeNL2bZuJG+WXvUcK6j47
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2abbcbe9e1f02f0313c5f84a1ddabcfe_JaffaCakes118
Files
-
2abbcbe9e1f02f0313c5f84a1ddabcfe_JaffaCakes118.exe windows:1 windows x86 arch:x86
d8ef06b4364dbda5ba64bb5490960cc0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQueryEx
GetFileAttributesA
GlobalAlloc
SetFilePointer
GetCPInfo
WaitForMultipleObjects
RtlUnwind
GlobalReAlloc
CloseHandle
FileTimeToSystemTime
GetModuleHandleA
QueryPerformanceCounter
GetNumberFormatA
CreateFileMappingA
PulseEvent
TlsFree
IsBadReadPtr
GetSystemDirectoryA
GetVersion
GetStartupInfoA
HeapReAlloc
msvcrt
memcpy
_lrotr
_ismbckata
_controlfp
__setusermatherr
__p__fmode
wcstod
_adjust_fdiv
wcscspn
fseek
_except_handler3
__getmainargs
_initterm
__set_app_type
_wcserror
_mbccpy
_ismbbkana
wcsncpy
_ismbcspace
_wasctime
_assert
_acmdln
_ismbbpunct
_mbslen
__p__commode
pow
_wpgmptr
freopen
_XcptFilter
_wcsnicoll
_getpid
exit
_exit
_ismbcl2
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ