Static task
static1
Behavioral task
behavioral1
Sample
2efd977687901f4ea9230ea274a02efa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2efd977687901f4ea9230ea274a02efa_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2efd977687901f4ea9230ea274a02efa_JaffaCakes118
-
Size
56KB
-
MD5
2efd977687901f4ea9230ea274a02efa
-
SHA1
1d09a81e3b2408cdbda4831e01ca72a00afe3b72
-
SHA256
6eecbbb98e348b369e64d836d352bd2a25c59c1b210ca6f6d5d07b0e246e59e3
-
SHA512
531bcfeaca214806a10353ff66e832b56b2c79fdff3b3147147d1d9a2b51d999c9ed22b105a17609e8441e738d54c000b458ad2b5c7e7ecaa3c07c2fc7f208d9
-
SSDEEP
1536:OJ/yk+zq24PS3Fy2wU5BGcPEACZHchfR:OByZVwU5BGcPEACZHchp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2efd977687901f4ea9230ea274a02efa_JaffaCakes118
Files
-
2efd977687901f4ea9230ea274a02efa_JaffaCakes118.exe windows:1 windows x86 arch:x86
f23125fe45696fe496cb6db6b1b7e5aa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
GetModuleHandleW
GetCommandLineW
LocalAlloc
WaitForSingleObject
UnhandledExceptionFilter
LocalAlloc
InitializeCriticalSection
GetCommandLineW
GetProcAddress
GetModuleFileNameA
ExitProcess
InterlockedIncrement
user32
OffsetRect
IsDlgButtonChecked
SetWindowLongW
WinHelpW
SetRect
shell32
CommandLineToArgvW
SHGetMalloc
SHGetMalloc
DragFinish
ExtractIconW
Sections
.text Size: 48KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE