Static task
static1
Behavioral task
behavioral1
Sample
2c7df68c95822be1fc30059b71df23df_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2c7df68c95822be1fc30059b71df23df_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c7df68c95822be1fc30059b71df23df_JaffaCakes118
-
Size
96KB
-
MD5
2c7df68c95822be1fc30059b71df23df
-
SHA1
1c98fc3164f5bc932cba94990a68d0b0a3f97fa8
-
SHA256
4f0014c0ddf99f72e492303f54f3896b0dd5aac7a05e58220f76cdd096289523
-
SHA512
4017d0f9bbd8ae98f1ab21e684568ac03db0920fbaf57d05e2113c0fa5ff2782a65b1b0ab880f23db30e49bc95ad181ec8e9c62b424383c2529ee15042f82834
-
SSDEEP
1536:2kj0TRnN9AUwVMx64EBeq5Ec1V65SVoKoelXVW0PPe7w4ypW8BKaxvvmHB:2hTxN9ABVJ/ssEW6clX8ibpWUhpvmh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c7df68c95822be1fc30059b71df23df_JaffaCakes118
Files
-
2c7df68c95822be1fc30059b71df23df_JaffaCakes118.exe windows:4 windows x86 arch:x86
21093841a1670f425ce8fcd02ba273ba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetVersionExW
TerminateProcess
CreatePipe
PeekNamedPipe
GetShortPathNameW
GetEnvironmentVariableW
WinExec
SetUnhandledExceptionFilter
SetErrorMode
DuplicateHandle
GetModuleFileNameA
OpenMutexA
CreateMutexW
ReleaseMutex
SetEvent
WaitForSingleObject
GetCurrentProcess
GetTempPathW
FreeLibrary
LoadLibraryW
ExitProcess
GetCurrentProcessId
GetFileTime
GetModuleFileNameW
WideCharToMultiByte
CloseHandle
SetFilePointer
WriteFile
GetFileSize
CreateFileA
DeleteFileW
CreateDirectoryA
ResetEvent
WaitForMultipleObjects
VirtualFree
VirtualProtect
VirtualAlloc
GetCommandLineA
GetModuleHandleA
GetCurrentThreadId
MoveFileA
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapSize
GetSystemInfo
SetStdHandle
ReadFile
SetEndOfFile
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
HeapAlloc
GetStartupInfoA
GetVersionExA
GetProcAddress
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
user32
GetKeyNameTextW
IsDlgButtonChecked
DrawEdge
DrawIconEx
LoadBitmapA
IsDialogMessageW
GetIconInfo
CheckDlgButton
CallNextHookEx
SendMessageA
SetWindowTextA
SetClipboardData
CloseClipboard
EndDialog
OffsetRect
CheckRadioButton
IsClipboardFormatAvailable
SetForegroundWindow
IntersectRect
InsertMenuItemW
SetCursor
SetParent
InflateRect
SendDlgItemMessageA
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ