Static task
static1
Behavioral task
behavioral1
Sample
2cb00a607df6356185c540ffebce0617_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2cb00a607df6356185c540ffebce0617_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cb00a607df6356185c540ffebce0617_JaffaCakes118
-
Size
68KB
-
MD5
2cb00a607df6356185c540ffebce0617
-
SHA1
0f5991f00d483fcbf4f5cf13dd3ccd4bc2ed8da4
-
SHA256
2265859f01cbdddd14e46063180407cb0ece8bda1706a4ab676963a9358b2aa0
-
SHA512
5f8180050e8e3a26d9a2f3d61227e75fb34b1c6806343c38853e6e0ce491a4e015cedc37b3a42115f5e35ddde1784a5ca864b6f1e08ddbac79619214861db02c
-
SSDEEP
768:KEGOZyaN4MBbw3mqPUk/gWUvgPW4gds2IUIBToKt8F7D2JItc2YjYSXJlJSLjcju:Ki5qmqPUk/gVnLNIoxOjBJTSLjqvH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cb00a607df6356185c540ffebce0617_JaffaCakes118
Files
-
2cb00a607df6356185c540ffebce0617_JaffaCakes118.exe windows:4 windows x86 arch:x86
6fd2967c2ff00ea9c318aee27b56d7f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetConsoleCtrlHandler
GetLastError
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
LoadLibraryA
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetCurrentProcess
GetProcessTimes
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpynW
lstrcpyW
FindResourceA
SizeofResource
lstrlenA
LoadResource
LockResource
FreeResource
lstrcatW
lstrcmpiW
lstrlenW
IsBadReadPtr
HeapAlloc
RtlUnwind
HeapReAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TerminateProcess
UnhandledExceptionFilter
GetStringTypeW
user32
AppendMenuA
GetCursorPos
DestroyMenu
GetSystemMenu
GetMenuItemCount
RemoveMenu
DrawMenuBar
SetRect
IntersectRect
SetRectEmpty
GetFocus
LoadBitmapA
CreateCaret
LockWindowUpdate
ShowCaret
GetDesktopWindow
GetWindowDC
ReleaseDC
AdjustWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
advapi32
RegDeleteValueA
IsTextUnicode
IsValidSid
GetUserNameA
EncryptFileA
DecryptFileA
RegCreateKeyA
RegCloseKey
OpenEventLogA
ClearEventLogA
ReportEventA
GetNumberOfEventLogRecords
GetOldestEventLogRecord
BackupEventLogA
CloseEventLog
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ