Static task
static1
Behavioral task
behavioral1
Sample
2f80a37466d146dab34f798d1aba8fa3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f80a37466d146dab34f798d1aba8fa3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f80a37466d146dab34f798d1aba8fa3_JaffaCakes118
-
Size
67KB
-
MD5
2f80a37466d146dab34f798d1aba8fa3
-
SHA1
3f8939d9eb9cb11e3e62a2e3a9237697f0342dd3
-
SHA256
11e8a449241541eb56c604bf2431854b515b2040f0dcb5253c3d6ce4e7cb953b
-
SHA512
47747b9e28107130df50ea09dedcb398bdd68bea004bd7d9bb0cf30030a875e37afd544f88a19c7fba839792d19dc09f62e61865c2f499e7f49d31c11dd5969e
-
SSDEEP
1536:sXgprFWGA0UyRTYLcwGTykEzEoDaB150P:Kg5F+KYLo+aB150P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f80a37466d146dab34f798d1aba8fa3_JaffaCakes118
Files
-
2f80a37466d146dab34f798d1aba8fa3_JaffaCakes118.exe windows:5 windows x86 arch:x86
f50160b31256a289096112651e85dde1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFileMappingW
CloseHandle
DeleteFileW
CreateProcessW
WaitForSingleObject
CreateFileMappingW
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
MoveFileW
MoveFileExW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStartupInfoW
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
RtlUnwind
GetLocaleInfoA
WideCharToMultiByte
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
RaiseException
user32
LoadStringW
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
shell32
SHGetSpecialFolderPathW
ord165
urlmon
URLDownloadToFileW
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ