Static task
static1
Behavioral task
behavioral1
Sample
2c3ee25e82a4859a21c85f23e5502843_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c3ee25e82a4859a21c85f23e5502843_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c3ee25e82a4859a21c85f23e5502843_JaffaCakes118
-
Size
225KB
-
MD5
2c3ee25e82a4859a21c85f23e5502843
-
SHA1
3203f0f4604f35184328ce5f5e6708099ee6e115
-
SHA256
1d01516066858c2c9538b350c8464fee431dd74eaacf7fb092adae7b8e0a25fd
-
SHA512
c796c8003c9242338fde4622e67c3d374a33d4b9c731536152a24629d6bb50310b02ab85b69daf53a98d338c9417bcc9c0dccdb6b924f047c26de97bfd7adee2
-
SSDEEP
3072:H4cmbRwVnNXKAD75Pz0CgxcWGIZc69iZfkt0Y3fUv4zLQntJxLBq8UTqkQA/bNAg:6PAnN0CgankcrI0+h4xLB3UtQA/JsY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c3ee25e82a4859a21c85f23e5502843_JaffaCakes118
Files
-
2c3ee25e82a4859a21c85f23e5502843_JaffaCakes118.exe windows:4 windows x86 arch:x86
75f5b8adb1917360b96f4b7d87e42121
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CancelDeviceWakeupRequest
ClearCommError
EnterCriticalSection
ExitProcess
GetLogicalDrives
GetProfileIntA
GetSystemTimeAsFileTime
GetTempFileNameA
GlobalAddAtomA
GlobalAlloc
GlobalFindAtomW
GlobalReAlloc
LocalFileTimeToFileTime
OpenEventA
PrepareTape
ReleaseSemaphore
SetCommConfig
TerminateThread
Thread32First
WritePrivateProfileSectionA
_lread
lstrcpy
lstrcpynA
user32
ChangeMenuA
CharLowerBuffW
CheckMenuRadioItem
CreateMDIWindowA
DdeFreeStringHandle
DrawCaptionTempA
FlashWindowEx
GetActiveWindow
GetKeyNameTextW
GetOpenClipboardWindow
GetWindowThreadProcessId
InsertMenuItemW
IsCharUpperA
LoadIconA
MessageBoxIndirectA
MsgWaitForMultipleObjects
PostQuitMessage
RegisterClassExW
SendInput
SendNotifyMessageW
SetDlgItemInt
TrackPopupMenuEx
WinHelpA
gdi32
CreateBitmap
CreateCompatibleDC
CreateEllipticRgnIndirect
CreateFontW
CreatePalette
CreateScalableFontResourceW
FillPath
GetBoundsRect
GetDeviceGammaRamp
GetICMProfileA
GetMetaFileW
GetObjectW
GetPaletteEntries
GetViewportExtEx
GetWindowOrgEx
PolyDraw
RestoreDC
SetBkColor
SetICMProfileW
SetMetaFileBitsEx
SetMiterLimit
Sections
.text Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 223KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ