Static task
static1
Behavioral task
behavioral1
Sample
2f2f1b2cbb4fa84fe77f2da8bedba793_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f2f1b2cbb4fa84fe77f2da8bedba793_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f2f1b2cbb4fa84fe77f2da8bedba793_JaffaCakes118
-
Size
43KB
-
MD5
2f2f1b2cbb4fa84fe77f2da8bedba793
-
SHA1
6e012fa4a662982f13c0f8bab6df223ee54f479d
-
SHA256
de66080663e0e95ef094dee5695ee1f3321328e4b65b31c52d7993aa9b1654e2
-
SHA512
55296af8b2cc6c1a5432eb06271cfafbb443094a72ff93fa1ce633d853d9bda6e284993fba2cbc6169b76cc7efd5267b985c55f6df200d4791a98ccca9422e96
-
SSDEEP
768:H8bSE5kqR+abAEE1qRwzNqSm/ANp3E+xddHjOlwiSFA2K0fgABwII2TCfz:H85+m327oSJ3EgrOqhFI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f2f1b2cbb4fa84fe77f2da8bedba793_JaffaCakes118
Files
-
2f2f1b2cbb4fa84fe77f2da8bedba793_JaffaCakes118.exe windows:5 windows x86 arch:x86
c3b004b97d2fef916103ebee0a77424b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileExW
CreateFileMappingW
CopyFileW
lstrcatW
ExpandEnvironmentStringsW
GetModuleFileNameA
FlushFileBuffers
GetTimeZoneInformation
CreateThread
CreateProcessW
UnmapViewOfFile
FindFirstFileW
GetUserDefaultUILanguage
lstrlenA
EnterCriticalSection
FindClose
GetSystemTimeAsFileTime
SetFileTime
SetEndOfFile
GetSystemTime
GetCurrentThread
GetDriveTypeW
CreateEventW
SetEvent
MultiByteToWideChar
HeapAlloc
WriteFile
SetFileAttributesW
lstrcpynW
DisconnectNamedPipe
user32
GetWindowThreadProcessId
Sections
.spgd Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jizgx Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hodgz Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ