Static task
static1
Behavioral task
behavioral1
Sample
2afb186fa0cb5016148a70f8c409f64b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2afb186fa0cb5016148a70f8c409f64b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2afb186fa0cb5016148a70f8c409f64b_JaffaCakes118
-
Size
300KB
-
MD5
2afb186fa0cb5016148a70f8c409f64b
-
SHA1
af223b865ac8c19fb8a9441a17fa4f51cec64c28
-
SHA256
e4bccf35767ea76832fc1bf020c12cf0c24c5bb64c236ed3c40ba96445f6a915
-
SHA512
399774f057859673244a7437c687ee60897f70507224c796daaf5a2027d6c45cadd590ef6c185da794bc6acef2f995b77748773e27ddc73b13d319252174019b
-
SSDEEP
6144:hJHyrFSXy4xoNf/LAd6zVNcPGzRQUuG7liXumsRuK:Ghj4cbLvBq+s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2afb186fa0cb5016148a70f8c409f64b_JaffaCakes118
Files
-
2afb186fa0cb5016148a70f8c409f64b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d0828040f8e84eb304f541f482666207
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
CloseHandle
ExitProcess
FileTimeToSystemTime
FlushConsoleInputBuffer
WriteConsoleOutputAttribute
GetProfileIntA
GetFileAttributesExA
ReadDirectoryChangesW
CreateDirectoryW
IsDBCSLeadByte
SetVolumeLabelA
LoadLibraryA
IsDebuggerPresent
VirtualProtect
GetCommandLineA
lstrlenA
user32
DispatchMessageA
CreateWindowExA
EnumDesktopsA
SetLastErrorEx
EnumDisplayMonitors
GetWindowLongA
GetWindow
CreateAcceleratorTableA
IsDialogMessageA
UnhookWindowsHookEx
GetAncestor
GetScrollInfo
SetMenuItemBitmaps
ClipCursor
DestroyAcceleratorTable
SetSysColors
SetCapture
GetKeyboardLayoutNameA
DeleteMenu
CharUpperA
SetCaretPos
GetMenuInfo
OemToCharBuffA
TileWindows
RegisterHotKey
gdi32
SetWinMetaFileBits
GetPaletteEntries
GetTextExtentPoint32A
PlayMetaFile
SetBitmapBits
EnumObjects
Rectangle
ScaleWindowExtEx
GetTextExtentExPointW
SelectClipPath
advapi32
LookupPrivilegeNameA
shell32
DragQueryPoint
SHGetFileInfoA
DragQueryFileW
ole32
CoRevokeClassObject
WriteClassStg
CoQueryClientBlanket
CoCreateGuid
StringFromGUID2
OleDestroyMenuDescriptor
ReadClassStg
OleCreateFromData
comctl32
ImageList_DrawIndirect
ImageList_Replace
shlwapi
PathIsUNCA
StrFormatByteSizeA
PathAddBackslashW
StrChrIW
setupapi
SetupDiOpenDevRegKey
SetupScanFileQueueW
SetupDiCreateDeviceInfoA
Sections
.text Size: 272KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE