Static task
static1
Behavioral task
behavioral1
Sample
2ee9c9382a767c09d8509826a149cc6f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ee9c9382a767c09d8509826a149cc6f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ee9c9382a767c09d8509826a149cc6f_JaffaCakes118
-
Size
312KB
-
MD5
2ee9c9382a767c09d8509826a149cc6f
-
SHA1
d2bacd951ed2a20e4bc9eba147a76321f3adaa0c
-
SHA256
03d5b617edcfdfb851230081f640319e075e47d20b20321d8d3e175267166e17
-
SHA512
9d60f728ec68966071f91b8005009a59209aa03aa6cc4005f0459a2b71a53588c963dc946e26b7f0d2f30e74df48eb2e8b65fad541db4e6fc99a4d8dfb4c1783
-
SSDEEP
6144:tlhEVFmqqsAxUK45IjPHimC/zN0efxA0878PwW+:tcvmqVAIaimC/GGxDC8IV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ee9c9382a767c09d8509826a149cc6f_JaffaCakes118
Files
-
2ee9c9382a767c09d8509826a149cc6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
03cc96309709ed30d6263ed6817883e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
GetUserDefaultLangID
GetConsoleCP
VirtualAlloc
CreateThread
GetExitCodeThread
GetThreadLocale
CompareStringA
GetModuleHandleA
GetPriorityClass
TlsFree
GetStdHandle
GlobalFindAtomA
ReleaseMutex
GetVolumeInformationA
GetOEMCP
CreateMutexA
CreatePipe
GetProcessHeap
SetEvent
IsDBCSLeadByte
user32
GetWindowTextLengthA
GetWindowTextA
GetActiveWindow
GetSystemMetrics
CloseWindow
GetForegroundWindow
ValidateRect
GetWindow
GetFocus
InvalidateRect
GetClassInfoExA
IsWindowVisible
IsIconic
GetDC
ReleaseDC
ShowWindow
GetClassNameA
RegisterClassA
ReleaseDC
shell32
SHBrowseForFolderA
SHCreateShellItem
SHGetFolderPathA
SHGetFileInfoA
SHChangeNotify
userenv
LoadUserProfileA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ