Static task
static1
Behavioral task
behavioral1
Sample
2dc288baade07b837f4e258d58ae1d30_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2dc288baade07b837f4e258d58ae1d30_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2dc288baade07b837f4e258d58ae1d30_JaffaCakes118
-
Size
93KB
-
MD5
2dc288baade07b837f4e258d58ae1d30
-
SHA1
a84d8dab0be3fcff0cbd79fc8bc813ccf6c32b06
-
SHA256
40fdc5b9510defb39ad05da698bc26c0e60118e9d11dba4ca65931c1c930d936
-
SHA512
1b60f3cc11fb33678136f6b7da7a73880ab35cf58382af54388e1bb634c86265bf8ba2c5efa34ff1e73d1c2c2542b18256336066c27f88508c8a9346af4b8cc7
-
SSDEEP
1536:Hd6ZkBk3ltpg5lTX8iE3cNwdBFFE+qpW+bqPZbyxGB47EMbLzeqooY:Hd6MIMlTX8bMNwdBFipWJBFe7E0La5oY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dc288baade07b837f4e258d58ae1d30_JaffaCakes118
Files
-
2dc288baade07b837f4e258d58ae1d30_JaffaCakes118.exe windows:4 windows x86 arch:x86
7c889e8a231dbec89421262f471aa874
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
GetLastError
GetFileAttributesA
HeapSize
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
VirtualAlloc
IsBadWritePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetStringTypeA
GetStringTypeW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
LoadLibraryA
ReadFile
SetStdHandle
SetEnvironmentVariableA
GetLocaleInfoW
Sections
.data Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE