Static task
static1
Behavioral task
behavioral1
Sample
2d40684ea4e61d98c08ae33c8f239f06_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d40684ea4e61d98c08ae33c8f239f06_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2d40684ea4e61d98c08ae33c8f239f06_JaffaCakes118
-
Size
27KB
-
MD5
2d40684ea4e61d98c08ae33c8f239f06
-
SHA1
bdec07e3741c80afc1b8f40611d17bf2b9cdd5f9
-
SHA256
d500deefab7ac58c54983e43bc3269c59b0aab2a7db36ca24aeff0ec5cb3efea
-
SHA512
cb39cb6ea2d9b7bad414a97cf8ddd56cb3a8c4eccd389305502aa692531e577b0af4c6719c4bd420b8ed748dcf9693366a32f90eadb466840d8b8192f83f91ef
-
SSDEEP
384:Ripp6r++beg0hkqaJW+1ogoF4ZU0Z1i1kp5kMINqbjO:+2+2nPD1VZBniOp5DVbj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d40684ea4e61d98c08ae33c8f239f06_JaffaCakes118
Files
-
2d40684ea4e61d98c08ae33c8f239f06_JaffaCakes118.exe windows:4 windows x86 arch:x86
aad06cd6a5371eda2af28a0aebfe9cd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
GetExitCodeProcess
FindResourceA
CloseHandle
DeleteAtom
lstrlenW
CreateFileA
LoadLibraryExW
CreateMutexA
GlobalFree
GlobalUnlock
VirtualQuery
ReleaseMutex
GetCurrentThreadId
SetLastError
HeapCreate
SetEnvironmentVariableA
GetModuleHandleA
GetStdHandle
GetPriorityClass
user32
GetIconInfo
CreateWindowExA
FillRect
CheckRadioButton
CreateMenu
DispatchMessageA
SetFocus
IsWindow
GetDlgItem
GetDC
CallWindowProcA
DrawEdge
DrawMenuBar
ntshrui
GetLocalPathFromNetResourceA
SetFolderPermissionsForSharing
GetNetResourceFromLocalPathA
IsPathSharedA
IsPathSharedW
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cgygcpy Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE