Static task
static1
Behavioral task
behavioral1
Sample
2cb6078a5d5fda43a9539c66cfd8c25e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2cb6078a5d5fda43a9539c66cfd8c25e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cb6078a5d5fda43a9539c66cfd8c25e_JaffaCakes118
-
Size
118KB
-
MD5
2cb6078a5d5fda43a9539c66cfd8c25e
-
SHA1
0ad087b0d087a182731b01b0d058ba384be1994e
-
SHA256
a23752acfa0532e7f5e96c3a89ee5b1ca535ba93f0209801c6ce05921001237e
-
SHA512
794f28b2ee4cac626c626cd38d9029e2ab65dfd53e224f53d7c0a8f79c8620a1dbb084f7ff2403bf26b6729882d00d9a5f3ecc6b0e90cb1f8af2acbe97bb30e6
-
SSDEEP
3072:6xM5Q2vkUvzYSZ3WWdt5ewhPK1XuzXFh:2M5hkURZbkQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cb6078a5d5fda43a9539c66cfd8c25e_JaffaCakes118
Files
-
2cb6078a5d5fda43a9539c66cfd8c25e_JaffaCakes118.exe windows:5 windows x86 arch:x86
5891a2dc6ec71391ad7ae92e96436da0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetCurrentDirectoryA
SetFileTime
IsValidCodePage
MulDiv
VirtualProtect
GetModuleHandleA
UnhandledExceptionFilter
GetStartupInfoA
GetOEMCP
GetModuleHandleW
InterlockedExchange
GetLocalTime
GetExitCodeProcess
user32
GetScrollInfo
ShowOwnedPopups
LoadCursorA
SetWindowLongA
GetScrollRange
GetMessagePos
SetFocus
msvcrt
log10
__set_app_type
_except_handler3
_ftol
_wtol
strstr
_adjust_fdiv
__p__commode
_strlwr
_XcptFilter
__p__fmode
fgetpos
clearerr
_initterm
_fdopen
fgetc
exit
_read
_c_exit
fread
pow
sin
_getch
iswdigit
_acmdln
__getmainargs
__setusermatherr
strcmp
comctl32
DestroyPropertySheetPage
ImageList_EndDrag
ImageList_SetOverlayImage
ImageList_GetImageCount
ImageList_Replace
InitializeFlatSB
ImageList_DragEnter
ImageList_SetIconSize
ImageList_LoadImageW
PropertySheetA
ImageList_GetIcon
version
GetFileVersionInfoA
GetFileVersionInfoW
VerQueryValueA
VerFindFileW
VerLanguageNameA
shell32
ShellExecuteExA
SHAddToRecentDocs
DragFinish
ShellExecuteA
SHGetFolderLocation
SHGetSpecialFolderPathA
SHBrowseForFolderW
advapi32
RegOpenKeyW
QueryServiceStatus
SetSecurityDescriptorGroup
CryptHashData
RegEnumKeyExA
RegQueryInfoKeyA
AddAccessAllowedAce
AdjustTokenPrivileges
ole32
CoCreateInstance
OleUninitialize
StgOpenStorage
CoGetMalloc
CoTaskMemFree
CoCreateGuid
CoRegisterMessageFilter
StringFromGUID2
ProgIDFromCLSID
CreateStreamOnHGlobal
CoTaskMemRealloc
oleaut32
VariantClear
VariantCopyInd
SafeArrayGetUBound
SafeArrayGetElement
SetErrorInfo
SysReAllocStringLen
SysAllocStringLen
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ