Static task
static1
Behavioral task
behavioral1
Sample
2c2a5e8219693d314a403f1e42da739e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2c2a5e8219693d314a403f1e42da739e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c2a5e8219693d314a403f1e42da739e_JaffaCakes118
-
Size
272KB
-
MD5
2c2a5e8219693d314a403f1e42da739e
-
SHA1
9a0e7dd9378011e3e561b44e6accb96149aa94c0
-
SHA256
048c3c2632e582a3e9b142fbe5cad3b75e707743c66313af803f585e2ecfb4f5
-
SHA512
9406cd781d44ddbfab1b140967f2cf3b306b71f723b510562fb9363303a1de41113ff0dc930fd490bda7eea6f0c6ba66043f36f94a680d236126eb834aeb9d22
-
SSDEEP
6144:zmbx7zZpgnov+aXBNDppukcLN1rOM8uxt2PBPcVk1:qbnoex/12xy4+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c2a5e8219693d314a403f1e42da739e_JaffaCakes118
Files
-
2c2a5e8219693d314a403f1e42da739e_JaffaCakes118.exe windows:4 windows x86 arch:x86
2731b0967579d59f191e887b8317e221
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateFileMappingA
CreateThread
EnterCriticalSection
ExitThread
FindNextFileA
GetModuleHandleA
GetPrivateProfileStringA
GetTickCount
GlobalAlloc
InitializeCriticalSection
InterlockedExchange
IsBadCodePtr
LeaveCriticalSection
LoadLibraryA
LocalLock
LocalUnlock
SetEvent
Sleep
TerminateThread
UnmapViewOfFile
WaitForSingleObject
WriteConsoleA
WriteFile
lstrcpynA
lstrlenA
user32
AdjustWindowRectEx
CharNextW
DestroyIcon
EnableMenuItem
GetShellWindow
InsertMenuItemW
MessageBoxW
SetScrollInfo
SetWindowPlacement
TrackPopupMenu
WaitMessage
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 257KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ