Static task
static1
Behavioral task
behavioral1
Sample
2f7c10914b5f4eb21cc64a5412c1bc46_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f7c10914b5f4eb21cc64a5412c1bc46_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f7c10914b5f4eb21cc64a5412c1bc46_JaffaCakes118
-
Size
190KB
-
MD5
2f7c10914b5f4eb21cc64a5412c1bc46
-
SHA1
8c769d69b298d24e9cc0e795684671039f9af8cf
-
SHA256
c886823f7eb7eb4f30698cfd63f60d9b0412ac3c6a09195c6191a24c023813a8
-
SHA512
244b90ab0a191893a5d36630c05b678bfeb31ace3ad49356e2b9b375a77347a28f79f5ad249699edc695697034f5d9ff418b7e35d7fcfeea1d30fa9198ba1d43
-
SSDEEP
3072:CWXm7BOw1Ylb9AhhnQQi9UoHHwYiq4k/rHuO5Pgn96yqubmrhy8G63HZPXo:F3w1+pAnQQKUyxLuO9W9TClywZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f7c10914b5f4eb21cc64a5412c1bc46_JaffaCakes118
Files
-
2f7c10914b5f4eb21cc64a5412c1bc46_JaffaCakes118.exe windows:4 windows x86 arch:x86
57fca8e35daf8d03866710dd24c6dc56
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleTranslateAccelerator
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
winmm
timeGetTime
timeSetEvent
kernel32
GetModuleHandleA
QueryMemoryResourceNotification
InterlockedDecrement
CloseHandle
LoadResource
lstrlenA
CompareStringW
IsDBCSLeadByte
SetEvent
OpenProcess
LocalFree
SizeofResource
GetCurrentThreadId
CreateEventA
WaitForSingleObject
HeapAlloc
EnumResourceTypesW
EnterCriticalSection
CompareStringA
InterlockedIncrement
CreateThread
LeaveCriticalSection
GetCurrentThread
lstrcpynA
GetFileAttributesA
TerminateThread
lstrcmpiA
GetVersion
lstrcpyA
GetPrivateProfileSectionNamesA
LoadLibraryA
GetComputerNameA
FindResourceA
InitializeCriticalSection
lstrlenW
DeleteCriticalSection
GetModuleFileNameA
FormatMessageA
lstrcatA
GetCurrentProcess
RaiseException
oleacc
CreateStdAccessibleObject
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ