Static task
static1
Behavioral task
behavioral1
Sample
2d01ba8dd88c4b71efc0fd47b8b6be7f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d01ba8dd88c4b71efc0fd47b8b6be7f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d01ba8dd88c4b71efc0fd47b8b6be7f_JaffaCakes118
-
Size
52KB
-
MD5
2d01ba8dd88c4b71efc0fd47b8b6be7f
-
SHA1
74db500870b5ffc6d59e666b2bc9a15775999867
-
SHA256
fee9fc1bbb7f95364af35507d24184bdd6dc6052252f632268d68f93ca949c71
-
SHA512
4e8e231116202e3d7bb031fdcf60139f67a7ec8546cf6f2de2097ebc344abfbe093a3a71c7a699d50b8b228f1596ff1d6dba05ee1c40c50d5b9032a977371927
-
SSDEEP
768:P1lvYAEEb4MJugqjBqFsNWA2swxDVOmcZwfDl78Yi40vhz35riaTOH+:P1lvxEAYdBO4WHsgZcuDec0vTriRe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d01ba8dd88c4b71efc0fd47b8b6be7f_JaffaCakes118
Files
-
2d01ba8dd88c4b71efc0fd47b8b6be7f_JaffaCakes118.exe windows:5 windows x86 arch:x86
1cdd77fafdce83afb134fe71004d60da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteValueA
kernel32
GetFileTime
shlwapi
PathCombineW
PathFileExistsW
PathMatchSpecW
SHDeleteKeyA
StrCmpNIW
StrStrW
wnsprintfW
wvnsprintfW
user32
CharLowerBuffA
DispatchMessageA
GetClassNameA
GetIconInfo
GetKeyboardState
GetKeyState
GetMessageA
GetWindowThreadProcessId
SendMessageA
SetProcessWindowStation
ToUnicode
Sections
.nwraz Size: 42KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nab Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fgf Size: 6KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ