Static task
static1
Behavioral task
behavioral1
Sample
2bc41d05cf048a728c9011da616edde8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bc41d05cf048a728c9011da616edde8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2bc41d05cf048a728c9011da616edde8_JaffaCakes118
-
Size
12KB
-
MD5
2bc41d05cf048a728c9011da616edde8
-
SHA1
2fd6bdc1a291f3ac3479875ff569d6189ae464e6
-
SHA256
ef0be712ea728fe12e7182e602c5f1ce048320b84dbe71597e1252fc49034805
-
SHA512
e56a6b33d3eae3369946137fd0765015eda8fb37dfde12992f9faa7ca13fce2e21f34ed4525b442cd5d8ab23705ce3b815542241676a3a0f5776879a5550cec0
-
SSDEEP
192:LQHLHwrwiY7jCWCb0Uh+5HYL88gVl5/SJEtxpk58ratN8icMrXz:LssrH5DJE/aX8KrD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bc41d05cf048a728c9011da616edde8_JaffaCakes118
Files
-
2bc41d05cf048a728c9011da616edde8_JaffaCakes118.exe windows:5 windows x86 arch:x86
1b71b830bdff0665975571afdf251287
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PeekMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
RegisterClassExA
CharUpperBuffA
RegisterClassA
DefDlgProcA
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadIconA
EnableWindow
SetWindowTextA
DefWindowProcA
PostQuitMessage
kernel32
GetStartupInfoA
GetCommandLineA
ReadFile
GetModuleHandleA
CreateThread
lstrcmpiA
EnterCriticalSection
ResetEvent
WaitForMultipleObjects
GetTickCount
LeaveCriticalSection
GetModuleFileNameA
ExitProcess
CreateFileA
Sleep
SetFilePointer
GetProcessId
lstrcmpA
lstrcpyA
SetEvent
CreateEventA
InitializeCriticalSection
lstrlenA
HeapAlloc
GetProcessHeap
CloseHandle
rasapi32
RasSetEntryPropertiesA
RasEnumEntriesA
RasGetEntryPropertiesA
RasDialA
RasEnumDevicesA
RasHangUpA
RasEnumConnectionsA
RasGetConnectStatusA
RasGetErrorStringA
comctl32
ord17
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE