Static task
static1
Behavioral task
behavioral1
Sample
2bd58c84ee4273baba7cae7cfd643f5f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2bd58c84ee4273baba7cae7cfd643f5f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2bd58c84ee4273baba7cae7cfd643f5f_JaffaCakes118
-
Size
131KB
-
MD5
2bd58c84ee4273baba7cae7cfd643f5f
-
SHA1
6eb65de9d8823c388e96c1feb473378463f75df6
-
SHA256
cb97c2ac0e359c44cbde5e31b8d9f52a72d474ba76d331ed3e8899d48012779e
-
SHA512
869d9237abb80d226dd3c9aeb7a05617a848dd6c74809524df408b8e206485428d8ceb23d55f7dd3c825e2353a4d301a96dc6eabeae6f0c62170a93f18370177
-
SSDEEP
3072:BF9Pi7dxJtWJDoVkNvIbrCtjzxkY/pvscjluezyxdUwdwvch:B7iZxJEeZrCtZB/C8GXtdach
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bd58c84ee4273baba7cae7cfd643f5f_JaffaCakes118
Files
-
2bd58c84ee4273baba7cae7cfd643f5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
52ad38c27aa8d4d875fcf54c5f546237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
SetFilePointer
lstrlenA
GetCurrentProcessId
ReadFile
GetSystemTime
GetFileSize
CreateThread
TerminateThread
GetDriveTypeA
GetLogicalDriveStringsA
FindClose
FindNextFileA
FindFirstFileA
CreateFileA
GetSystemDirectoryA
lstrcatA
ExitThread
GetTickCount
lstrcmpiA
CreateMutexA
CloseHandle
ExitProcess
GetCurrentThread
SetThreadPriority
Sleep
GetCurrentProcess
GetModuleHandleA
lstrcpyA
GetFileAttributesA
DeleteFileA
MoveFileA
RaiseException
GetLocalTime
lstrcpynA
lstrcmpA
GetComputerNameA
GetProcessTimes
CreateProcessA
GetVersionExA
GetTempFileNameA
GetTempPathA
WinExec
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetExitCodeThread
InitializeCriticalSection
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
LoadLibraryA
GetProcAddress
GlobalAlloc
GlobalFree
FreeLibrary
GetLastError
GetModuleFileNameA
user32
CharLowerA
wsprintfA
wvsprintfA
advapi32
RegCreateKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
InitializeAcl
IsValidAcl
ControlService
ChangeServiceConfigA
OpenSCManagerA
OpenServiceA
DeleteService
CloseServiceHandle
GetUserNameA
RegEnumValueA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
CloseEventLog
ReadEventLogA
OpenEventLogA
ole32
CoInitializeSecurity
StringFromCLSID
CoCreateGuid
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
VariantInit
ws2_32
WSAGetLastError
shutdown
ioctlsocket
select
closesocket
socket
accept
listen
bind
inet_ntoa
gethostbyname
WSACleanup
gethostname
WSAStartup
htons
connect
recv
getpeername
send
setsockopt
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 34KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE