Static task
static1
Behavioral task
behavioral1
Sample
2fc6947405d68d817de74740ffe7065f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2fc6947405d68d817de74740ffe7065f_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2fc6947405d68d817de74740ffe7065f_JaffaCakes118
-
Size
82KB
-
MD5
2fc6947405d68d817de74740ffe7065f
-
SHA1
5cd7b59a4beb23e8864402f6e217f559cddffd07
-
SHA256
f0a920f8470818810a709567c9fe4e4cbee5f852638df4fa196d9dfbf7f94626
-
SHA512
ae154f836fd3b47e1d5bd1e04cb93e4fd9a2d2b209dc7b92f6cff4d558d38c7b72240b660420bdd1b8ba8930bbd55b76f7e27b485507d728420a65c51f14baa0
-
SSDEEP
1536:67I2ZS3FIKVWBuGgqqHqr+kyNnRijtV87B3vfbjXq49WDPr338woe:qZS3UBuvqqnZnRijtyH5mPzDoe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fc6947405d68d817de74740ffe7065f_JaffaCakes118
Files
-
2fc6947405d68d817de74740ffe7065f_JaffaCakes118.exe windows:4 windows x86 arch:x86
03cc12cfd2562aaebb00dcb08f6e3320
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetVersion
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetFileSize
CloseHandle
DeviceIoControl
GetModuleHandleA
FindResourceW
HeapAlloc
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetStringTypeW
user32
UpdateWindow
ShowWindow
CreateWindowExA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconW
RegisterClassExA
GetClientRect
GetSystemMetrics
wsprintfA
DrawTextA
LoadStringA
DefWindowProcA
MessageBoxA
FindWindowA
DestroyWindow
BeginPaint
EndPaint
gdi32
CreateBitmap
TextOutA
ole32
CoTaskMemAlloc
CoUninitialize
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODEA Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 265B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ