Static task
static1
Behavioral task
behavioral1
Sample
2b83e66034a3acd50ec4d28e9ee2ec1d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2b83e66034a3acd50ec4d28e9ee2ec1d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b83e66034a3acd50ec4d28e9ee2ec1d_JaffaCakes118
-
Size
13KB
-
MD5
2b83e66034a3acd50ec4d28e9ee2ec1d
-
SHA1
bc73fc780970152e9ec133e17ed9bfc97da8d3c0
-
SHA256
b01026f5e5e478c7983d499d0d100eab72412d60a41c1f499118687ea062b01f
-
SHA512
5c5b104f8a003139b71c81714fb4308010f477e33da6dcd1a552016b3f1be9680b031732e4e5d9301997e31baac6315121614ed016115d0a6789bec67bbce520
-
SSDEEP
192:+YdpgNKRRBGgTTmi/ObcGKKJ7dtDLzRvcWAzj:Lgsvki2/JdtDLzRvcW0j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b83e66034a3acd50ec4d28e9ee2ec1d_JaffaCakes118
Files
-
2b83e66034a3acd50ec4d28e9ee2ec1d_JaffaCakes118.exe windows:1 windows x86 arch:x86
99db6db55604a55dd04ac6fefc8ddd5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
Shell_NotifyIconA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
kernel32
DeleteFileA
ExitProcess
ExpandEnvironmentStringsA
FreeLibrary
GetCommandLineA
GetExitCodeThread
GetFileAttributesA
GetFileSize
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemDirectoryA
CloseHandle
LoadLibraryA
CopyFileA
LocalAlloc
LocalFree
MultiByteToWideChar
ReadFile
RtlUnwind
RtlZeroMemory
CreateFileA
SetFilePointer
VerLanguageNameA
VirtualAlloc
VirtualFree
WaitForSingleObject
WinExec
WriteFile
lstrcpyA
CreateThread
user32
SetTimer
KillTimer
LoadIconA
MessageBoxA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
RegisterClassA
PostQuitMessage
CreateWindowExA
DefWindowProcA
advapi32
RegCreateKeyA
RegCreateKeyExA
RegCloseKey
RegFlushKey
RegSetValueExA
crtdll
_itoa
__GetMainArgs
_sleep
_stricmp
abort
exit
raise
signal
strcat
strchr
strcmp
strncpy
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE