Static task
static1
Behavioral task
behavioral1
Sample
2f32eb517c8a9243276985237b452eb7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f32eb517c8a9243276985237b452eb7_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f32eb517c8a9243276985237b452eb7_JaffaCakes118
-
Size
1.0MB
-
MD5
2f32eb517c8a9243276985237b452eb7
-
SHA1
c61f53a10f93e7104f7f691faf056362a4d885c0
-
SHA256
00a13e7e34cab89799c2eda0d64aacf182c96342981722f1db77f71077a03f67
-
SHA512
057b941dd5cb9d0ca06e9f7f3bb7eb8a67c8ff61906efa25ffecb339e5ab5c55145cec222d1255fe5aa0dbe99faf9ae45f012b837cd41858fd9bc72dcc922859
-
SSDEEP
1536:rWn+npgiZRmXh3fgwyCyltOXxYMCbj9M/ipJflZplHd:Eopgibmlfg8wQxxCbj9wipJflZplHd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f32eb517c8a9243276985237b452eb7_JaffaCakes118
Files
-
2f32eb517c8a9243276985237b452eb7_JaffaCakes118.exe windows:4 windows x86 arch:x86
34e9d84a8d22a3cc16ab658acee368bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
OutputDebugStringA
WaitForSingleObject
CreateProcessA
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetSystemDirectoryA
GetLongPathNameA
GetTempPathA
GetCommandLineA
GetSystemTime
ExpandEnvironmentStringsA
GetVersionExA
GetFileAttributesA
MultiByteToWideChar
GetCurrentProcess
lstrlenA
GetWindowsDirectoryA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
WideCharToMultiByte
CopyFileA
MoveFileA
MoveFileExA
DeleteFileA
WriteFile
CreateFileA
GetFileSize
SetFilePointer
ReadFile
CloseHandle
Sleep
GetLastError
ReleaseMutex
CreateMutexA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetProcAddress
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
HeapSize
HeapReAlloc
RtlUnwind
GetTimeZoneInformation
GetLocalTime
RaiseException
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapFree
HeapAlloc
SetEnvironmentVariableA
user32
WaitForInputIdle
GetMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
advapi32
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegFlushKey
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
shell32
SHGetSpecialFolderPathA
wininet
InternetReadFile
InternetQueryDataAvailable
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 994KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ