Static task
static1
Behavioral task
behavioral1
Sample
2eeecf413d91b3f9cec050148627bf7a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2eeecf413d91b3f9cec050148627bf7a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2eeecf413d91b3f9cec050148627bf7a_JaffaCakes118
-
Size
23KB
-
MD5
2eeecf413d91b3f9cec050148627bf7a
-
SHA1
64f53361546bb7d1bbd10f28b02153bb99e9ff29
-
SHA256
4c860b4629ef826f93755989029ef8313db3325114586becf121e3bf9711bfc8
-
SHA512
195f773d28fa4fc2fd389aa66df1949c37c0d753cb4a98d3e5c92132b40e99e3a28f3adfa1d2bd357ccddc5b41cde94bd48d60affd6edb415fd9a87bbeddbce8
-
SSDEEP
384:GXFMojbxtLlTu8DgXy46FpHvGQP5IFlEVbOIeYeQBEBfbAl8BmsTs47IlAAgFzaI:iFr1u8Dyy46FpHNS9iGJMUs4sDV1Zd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eeecf413d91b3f9cec050148627bf7a_JaffaCakes118
Files
-
2eeecf413d91b3f9cec050148627bf7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
17423005ad86b2169a807327cb439091
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetLastError
FreeLibrary
HeapFree
GetProcessHeap
GetCurrentProcessId
GetModuleFileNameA
WaitForMultipleObjects
CloseHandle
HeapAlloc
GetSystemDirectoryA
DeleteFileA
lstrlenA
lstrcmpA
GetCurrentThreadId
SetEvent
ExitThread
ResetEvent
CreateThread
WaitForSingleObject
CreateEventA
CreateMutexA
CreateProcessA
WriteFile
Sleep
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
ReleaseMutex
lstrcpyA
CreateFileA
SizeofResource
LoadResource
FindResourceA
GetFileAttributesA
user32
GetDesktopWindow
wsprintfA
GetForegroundWindow
advapi32
RegSetValueExA
RegNotifyChangeKeyValue
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
ole32
OleUninitialize
OleInitialize
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ