Static task
static1
Behavioral task
behavioral1
Sample
2ecf9678e5818cd576ade5792731b5e1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ecf9678e5818cd576ade5792731b5e1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ecf9678e5818cd576ade5792731b5e1_JaffaCakes118
-
Size
806KB
-
MD5
2ecf9678e5818cd576ade5792731b5e1
-
SHA1
9aafa8e8878093330e080b6321d9c8723fb8ab32
-
SHA256
c781fcaff3bc6c7d43a0ccbbb1bb86d8edb3f1886babb30fe361fdfa608c42ad
-
SHA512
84f1ecf526f8ac69796f0725564943b8c39d0aa9acd4283edbbe211390a3d9d7efd38489b5b8de649b07ba7a4cc76003795cafefd93cd3be50dcf31cbe30deda
-
SSDEEP
12288:EM5CTL2xrGH5kuG9KRkQHD3c/4oMYcmqWA0zFVIzbt7h4zbOVVm546i8jQslmGCq:n6G/AH7g4oMY8WA0ZVIdj/m545iluCq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ecf9678e5818cd576ade5792731b5e1_JaffaCakes118
Files
-
2ecf9678e5818cd576ade5792731b5e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
e2f80536ec1b563c1465cdf44356d4f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
GetMailslotInfo
LocalSize
GetDriveTypeW
ResumeThread
GetPrivateProfileIntW
GlobalFree
lstrlenA
GetExitCodeProcess
GetACP
VirtualAlloc
WriteFile
FreeConsole
FindVolumeClose
CreateThread
GetEnvironmentVariableA
InterlockedExchange
GetModuleHandleW
CloseHandle
ResetEvent
user32
IsWindow
GetSysColor
GetKeyboardType
DrawStateW
EndDialog
CreateWindowExA
SetFocus
DispatchMessageA
CallWindowProcW
GetSysColor
GetCursorInfo
GetClientRect
GetClassInfoA
qedit
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllGetClassObject
DllUnregisterServer
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 797KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ