Static task
static1
Behavioral task
behavioral1
Sample
2d54277c0b01df4173b51ed3a87a324b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d54277c0b01df4173b51ed3a87a324b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d54277c0b01df4173b51ed3a87a324b_JaffaCakes118
-
Size
316KB
-
MD5
2d54277c0b01df4173b51ed3a87a324b
-
SHA1
8767220698c5d3419364858fc758e84e5728e411
-
SHA256
6fb1f0c627f656330bbefdf28d1c33dd5be5919f4e33eef11a6bd9ec27ef2169
-
SHA512
a6ed9a362d2c62531054eda7b2df64f931404be221f8dfa8a9036d856802d3a52506a6f1d6eca769014f463df7daa975e418aa8a40adcb11562ccc5ae55bd56d
-
SSDEEP
6144:QWMdxELT74WguP7eJ85VlGerWGFSK8p6M3CxQuYZTbPQnodj519ZEAS:QWKxEv741uPCc+GoK8VZvPLD5EA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d54277c0b01df4173b51ed3a87a324b_JaffaCakes118
Files
-
2d54277c0b01df4173b51ed3a87a324b_JaffaCakes118.exe windows:4 windows x86 arch:x86
fe4ab11e3273c82943f97651c423d004
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetAtomNameA
GetEnvironmentVariableA
GetVersion
GetModuleHandleW
Sleep
SetCommMask
lstrcmpA
ExitProcess
GetLongPathNameW
ExpandEnvironmentStringsW
SetSystemTime
GetModuleHandleA
GetCurrentThread
GetProcessAffinityMask
GetCurrentProcess
VirtualAlloc
WideCharToMultiByte
GetTempPathW
GetProcessHeap
GetLastError
SetThreadAffinityMask
GetCurrentThreadId
GetACP
Process32FirstW
Module32First
GetCommandLineA
GetModuleFileNameA
GetCurrentProcessId
OpenFileMappingA
GetCommandLineW
SetConsoleCP
iashlpr
ShutdownIas
DoRequest
AllocateAttributes
MemFreeIas
FreeAttributes
msvcrt
_setjmp
_lseeki64
iswcntrl
__p__iob
fgetpos
??0exception@@QAE@XZ
_execl
__p__osver
_wpopen
_access
rand
towlower
_chdir
exit
user32
ShowOwnedPopups
CharToOemA
WaitMessage
GetDC
GetMessageTime
GrayStringW
GetWindowTextA
DialogBoxIndirectParamAorW
GetSystemMetrics
PrivateExtractIconsW
msi
ord173
ord145
ord32
ord121
ord51
ord92
ord66
ord19
ord17
ord175
ord228
ord103
ord81
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbs Size: 155KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 134KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ