Static task
static1
Behavioral task
behavioral1
Sample
2d202e42689a06dd3dcf97403f4497f9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d202e42689a06dd3dcf97403f4497f9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d202e42689a06dd3dcf97403f4497f9_JaffaCakes118
-
Size
241KB
-
MD5
2d202e42689a06dd3dcf97403f4497f9
-
SHA1
8f92ff8205c2ee9d1e7cf7cfbede46a4aa8c66ac
-
SHA256
416b755feebca6e464ce51a3300f3f0167e2161efb81f1ef8852b6a21c68239e
-
SHA512
0344222c889368a6d1e430c52df03d9c5e781b4242b736067c2ceb04323fcefc711de27f76d95cb2ed363125d31b148ae95883c815b8106f1f1ca941d24a3fca
-
SSDEEP
3072:toJTu1qiBQ0cYpIB5Pl4Qeg5Sraky41PFotV72bbggEecoaUhg6saLA/0c5HrKsi:toSQYpyPl4Q9kmXWNQ72hDeQcnLKs4T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d202e42689a06dd3dcf97403f4497f9_JaffaCakes118
Files
-
2d202e42689a06dd3dcf97403f4497f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
69643cb208b4d7983089033331126925
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
kernel32
LocalAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetFileAttributesA
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
WideCharToMultiByte
ReadFile
WriteFile
SetFilePointer
oleaut32
DispInvoke
OleLoadPicture
VarUdateFromDate
GetErrorInfo
SetErrorInfo
VariantClear
SysReAllocStringLen
shlwapi
PathFindExtensionA
Sections
.text Size: 124KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ