Static task
static1
Behavioral task
behavioral1
Sample
2d85eb4cf7e508702458ee8821ea576a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d85eb4cf7e508702458ee8821ea576a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d85eb4cf7e508702458ee8821ea576a_JaffaCakes118
-
Size
68KB
-
MD5
2d85eb4cf7e508702458ee8821ea576a
-
SHA1
e25ce2145e0e376472de38068423f4edcd0d0ecf
-
SHA256
572d8de55b823216125bbebb167bdd5b37920705889b7a3965d52dfaf9e4af95
-
SHA512
6f2363575f223c17617e74471a7c9ca64d7a593415924d9f0908007ae94c2855e00b36225ec7a515eaeb5666d9a58e4f4722f9f04341ae0e13af50213675f044
-
SSDEEP
1536:xVOqOqgWhyiCLZAuaoVMpxRc8sKevmZolDRLa:+qOq1GNAcMG8sPeKlDA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d85eb4cf7e508702458ee8821ea576a_JaffaCakes118
Files
-
2d85eb4cf7e508702458ee8821ea576a_JaffaCakes118.exe windows:4 windows x86 arch:x86
785a06d8911fce44521923d214221e1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileA
WriteFile
GetCurrentProcessId
GetLastError
CreateMutexA
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
MoveFileA
GetFileAttributesA
FreeLibrary
CopyFileA
CreateProcessA
CreateDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
ExitProcess
GetTempPathA
HeapAlloc
HeapFree
HeapReAlloc
GetModuleHandleA
GetCurrentProcess
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
OpenProcess
VirtualAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetFilePointer
HeapSize
GetLocaleInfoA
GetCPInfo
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
RtlUnwind
InterlockedExchange
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
FlushFileBuffers
TerminateProcess
Sleep
CreateToolhelp32Snapshot
Process32First
CloseHandle
Process32Next
WideCharToMultiByte
LoadLibraryA
VirtualFree
GetProcAddress
advapi32
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegEnumValueA
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE