Static task
static1
Behavioral task
behavioral1
Sample
2d63e728e111040fa8fb98239dede72e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d63e728e111040fa8fb98239dede72e_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2d63e728e111040fa8fb98239dede72e_JaffaCakes118
-
Size
96KB
-
MD5
2d63e728e111040fa8fb98239dede72e
-
SHA1
f12e0a840ef1a61cba40f5eb5d5225078010e7d1
-
SHA256
d98dffc0f75034c30ef13747bdefe3d1ef2c49b871b78a8b51a20a9b69da177d
-
SHA512
4fe3e20eff6246c125b1384f4e4d213d2d839253c18f953d3779aa5e2dd59142525a1e6e1f1bb40b082a671b512a4261d5a427bba0c2a06b962d282cc99e21d4
-
SSDEEP
1536:/LwwrClb9dPUt5YzPSjuE9zTMsO3cohrwq3K0JWDrR4Ok39MNtytZxrQHZ:MwmBK5YzPvD7rhrPK0JirRsMT4HrQH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d63e728e111040fa8fb98239dede72e_JaffaCakes118
Files
-
2d63e728e111040fa8fb98239dede72e_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ba1c3ec55d6d408482d03100fa141cc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetProcessTimes
VirtualUnlock
FindVolumeClose
CancelDeviceWakeupRequest
HeapReAlloc
GlobalFix
GetEnvironmentVariableA
GetThreadContext
SetLastError
CreateHardLinkA
GetStartupInfoA
ExitProcess
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
WEIJUNLI Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA