Static task
static1
Behavioral task
behavioral1
Sample
2d8207df635e4ee83b0ec7ab08e248d9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d8207df635e4ee83b0ec7ab08e248d9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d8207df635e4ee83b0ec7ab08e248d9_JaffaCakes118
-
Size
422KB
-
MD5
2d8207df635e4ee83b0ec7ab08e248d9
-
SHA1
a81840b712defed7a214e70e6fbcad4cfd73f04f
-
SHA256
620b24a2d61c894ad8a1a962a89bafdc2cf2be94c126615b072836fe989bd6aa
-
SHA512
12ec9d1ce6db2992f946d1e4dbdc222259d1a7406eae78418d14507cd3210be0ef3462774546d0a90776d2f0c74e371d1020cf4ebe239a19b7473d13b2ac29a7
-
SSDEEP
12288:NL5J2lqhuOBgIiQLcPAS9G8A3d+M9oaJGiO4Pw:fJ20gI7coyG8A/mbiOJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d8207df635e4ee83b0ec7ab08e248d9_JaffaCakes118
Files
-
2d8207df635e4ee83b0ec7ab08e248d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
cffeac5393d23cd017aafb284fbdec58
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
GetTimeFormatA
CreateSemaphoreA
OpenFileMappingA
GetOEMCP
GetPrivateProfileStringA
HeapAlloc
LoadLibraryA
UnhandledExceptionFilter
MultiByteToWideChar
WideCharToMultiByte
TransactNamedPipe
SetConsoleOutputCP
GetCPInfo
TlsGetValue
TlsSetValue
FreeEnvironmentStringsW
GetStdHandle
GetStringTypeA
VirtualUnlock
TlsAlloc
GetDateFormatA
GetStringTypeW
GetEnvironmentStrings
GlobalCompact
GetVersionExA
VirtualProtect
GetStartupInfoW
GetProcAddress
CompareStringW
GetStartupInfoA
HeapFree
GetVersion
GetCurrentThread
GetCurrencyFormatA
HeapCreate
VirtualQuery
LeaveCriticalSection
HeapDestroy
SetHandleCount
GetACP
HeapSize
VirtualFree
GetModuleFileNameW
HeapReAlloc
LCMapStringW
ExitProcess
CompareStringA
CreateMailslotA
VirtualAlloc
TerminateProcess
QueryPerformanceCounter
GetCurrentProcess
IsValidCodePage
GetModuleHandleA
GetLastError
InitializeCriticalSection
IsBadWritePtr
GetCurrentThreadId
SetLastError
WriteFile
GetCommandLineW
GetLocaleInfoA
GetCurrentProcessId
GetModuleFileNameA
IsValidLocale
GetCommandLineA
GetTimeFormatW
GetTickCount
GetUserDefaultLCID
EnumSystemLocalesA
GetFileType
TlsFree
SetEnvironmentVariableA
RtlUnwind
GetEnvironmentStringsW
GetSystemTimeAsFileTime
InterlockedExchange
LCMapStringA
EnterCriticalSection
DeleteCriticalSection
GetLocaleInfoW
GetSystemInfo
GetTimeZoneInformation
advapi32
CryptSetHashParam
RegOpenKeyExA
RegEnumValueA
InitiateSystemShutdownA
RegQueryValueExA
RegDeleteKeyA
CryptVerifySignatureA
RegCreateKeyA
RegQueryMultipleValuesA
LookupAccountNameW
LookupPrivilegeValueA
LogonUserW
RegSetKeySecurity
CryptEncrypt
RegCreateKeyExA
RegDeleteValueA
CryptAcquireContextW
RegConnectRegistryA
CryptReleaseContext
CryptGenKey
gdi32
AbortPath
GetMapMode
EnumICMProfilesA
CreateColorSpaceA
PtVisible
Chord
GetBitmapDimensionEx
SetDIBColorTable
CreateICW
ChoosePixelFormat
CreateBitmap
MaskBlt
GetTextExtentExPointW
TextOutA
EnumMetaFile
OffsetRgn
SetViewportOrgEx
CombineRgn
GetMetaFileA
wininet
InternetSetCookieW
InternetFindNextFileW
InternetReadFileExA
UnlockUrlCacheEntryFileA
Sections
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 277KB - Virtual size: 303KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ