Static task
static1
Behavioral task
behavioral1
Sample
2e64654ef374576ca927448448d26189_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e64654ef374576ca927448448d26189_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e64654ef374576ca927448448d26189_JaffaCakes118
-
Size
312KB
-
MD5
2e64654ef374576ca927448448d26189
-
SHA1
3eac7ae99af57d0405cadb47d4a9f42dc9daf544
-
SHA256
a599564f3e0526f35e382c6ebc1fad11f92d2c61549dbb1432ef2704b147a07d
-
SHA512
53a0f83a80467c09d509c0bfd2dcaa11ddda14a5ebf179cd14c6d2edf2e1eafa3b9c377fb836e19653b58c98f163d921699965f956ef9df828af119f2c248f56
-
SSDEEP
6144:iaJbn8YMs5a8nqK7eEvRoOY5Oka6Q2iH0699R2rF531xjk:Jn8FK7eEvyOY8kb/c4p91K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e64654ef374576ca927448448d26189_JaffaCakes118
Files
-
2e64654ef374576ca927448448d26189_JaffaCakes118.exe windows:4 windows x86 arch:x86
5f8805a1920c24265cbe2002c97adee9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
SetEvent
ReleaseMutex
GetExitCodeThread
GetUserDefaultLangID
GetModuleHandleA
GetConsoleCP
GetOEMCP
GetVolumeInformationA
GetThreadLocale
GetProcessHeap
CreatePipe
GlobalFindAtomA
CreateMutexA
CompareStringA
TlsGetValue
GetPriorityClass
IsDBCSLeadByte
VirtualAlloc
TlsFree
CreateThread
user32
GetDC
ReleaseDC
ReleaseDC
InvalidateRect
GetClassNameA
GetClassInfoExA
GetFocus
IsIconic
GetActiveWindow
GetForegroundWindow
GetWindowTextLengthA
GetWindowTextA
ValidateRect
RegisterClassA
ShowWindow
IsWindowVisible
GetWindow
GetSystemMetrics
CloseWindow
shell32
SHBrowseForFolderA
SHChangeNotify
SHCreateShellItem
SHGetFolderPathA
SHGetFileInfoA
ntdsapi
DsBindA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ