Static task
static1
Behavioral task
behavioral1
Sample
2bd600612a6878fb65e6918a55eb090d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2bd600612a6878fb65e6918a55eb090d_JaffaCakes118
-
Size
1.6MB
-
MD5
2bd600612a6878fb65e6918a55eb090d
-
SHA1
95b28a1286154ebc40689f8d69ec4841e3d34854
-
SHA256
c780eb5d751f92369c89b344aa410ee4d9d1d8b6d4864c04963e7a5433a413a1
-
SHA512
0719e1ef9790b3bd64a940a0afaef844510feb6d9ff2ffa6b86209aa6f849e9f030f991daeaccd4b796530af0f8ca6b3c3dbf618f5a8aa2a0a3ab8e235157f4c
-
SSDEEP
24576:a0WngXBrFKdv9ibOatq8Bov9yx8MR0jGGT2bHCHg0Ip8E9KF79YhjwEkh9Puvq14:0gX5QR9QfAko88GGT2eg0FDF7j/h9aq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bd600612a6878fb65e6918a55eb090d_JaffaCakes118
Files
-
2bd600612a6878fb65e6918a55eb090d_JaffaCakes118.exe windows:4 windows x86 arch:x86
1abf2c919685404e929a3c7be52f8650
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
PolyBezierTo
EndPath
GetWorldTransform
SelectClipPath
SetGraphicsMode
SetBrushOrgEx
BeginPath
CreatePatternBrush
LineTo
SetROP2
Rectangle
PolylineTo
IntersectClipRect
CloseFigure
GetGraphicsMode
GetStockObject
FillPath
MoveToEx
GetClipBox
PolyDraw
kernel32
GlobalAddAtomW
VirtualFree
HeapReAlloc
FreeEnvironmentStringsA
GetACP
GetCPInfo
WideCharToMultiByte
SetUnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
GetOEMCP
IsBadWritePtr
GetStartupInfoA
HeapDestroy
UnhandledExceptionFilter
SetFilePointer
GetModuleFileNameA
EnumResourceNamesA
IsBadCodePtr
GetStdHandle
SetConsoleCtrlHandler
GetFileType
GetDateFormatW
FatalAppExitA
IsBadReadPtr
FreeEnvironmentStringsW
HeapCreate
VirtualAlloc
GetEnvironmentStrings
GetEnvironmentVariableA
SetHandleCount
GetCurrentThread
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 804KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 871KB - Virtual size: 870KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ