Static task
static1
Behavioral task
behavioral1
Sample
2b7d35d8a727258df7903dd6a398d14e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b7d35d8a727258df7903dd6a398d14e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b7d35d8a727258df7903dd6a398d14e_JaffaCakes118
-
Size
192KB
-
MD5
2b7d35d8a727258df7903dd6a398d14e
-
SHA1
7556071c19dc18a04c43d86b9f97b70b1ae89731
-
SHA256
d3c56863aa95884699c65113d3c4bf3da4e8a2a1fb863766cae8cd3e29431372
-
SHA512
b70cfa259efc6f935a7d0708855ee5216ff9492a9d1e50cd3aff8f19cfbd5a9d5c5f4013e9d4ea294214d451e015cd64e9aaab01b89cf7f5c9aaa23ee8d2d0d8
-
SSDEEP
3072:B/cAPf62FoF457yLkhl2q1E0wzwxFLzbnAERd6pk9jaKLfUjXvaxxQjWT:OGz8457ywhl28Efa1zbnP76qh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b7d35d8a727258df7903dd6a398d14e_JaffaCakes118
Files
-
2b7d35d8a727258df7903dd6a398d14e_JaffaCakes118.exe windows:4 windows x86 arch:x86
737f8129ea331cdc9266a55b05e547a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
FreeResource
LoadResource
FindResourceA
GetModuleHandleA
CloseHandle
GetCurrentProcess
MultiByteToWideChar
GetModuleFileNameA
SetProcessPriorityBoost
GetTempPathA
GetCurrentThread
SetPriorityClass
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
Sleep
SetCurrentDirectoryA
GetSystemDirectoryA
WideCharToMultiByte
GetTempFileNameA
SizeofResource
MoveFileExA
SetFileAttributesA
DeleteFileA
SetThreadPriority
LoadLibraryA
GetProcAddress
GetOEMCP
SetEndOfFile
HeapAlloc
ExitProcess
TerminateProcess
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
GetLastError
WriteFile
ReadFile
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
advapi32
RegSaveKeyA
RegRestoreKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyA
shell32
ShellExecuteExA
SHChangeNotify
ShellExecuteA
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ