Static task
static1
Behavioral task
behavioral1
Sample
2fb62cb172331bf6eed5289b64633e5e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2fb62cb172331bf6eed5289b64633e5e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fb62cb172331bf6eed5289b64633e5e_JaffaCakes118
-
Size
463KB
-
MD5
2fb62cb172331bf6eed5289b64633e5e
-
SHA1
718be8fe0c41b159079b1226dfc326d5c9376015
-
SHA256
a087c32664d0aff08c29167bc31d1bc601edba58856a79c0cc4e446cf3b81e96
-
SHA512
da929ff99aee45e18dac4ede04bd3a24f0c3d87135ee6358ea488dff6930f0e54e7941092bf6e813ac50ede1fa9910707c2745aa178eea2d895bec009b919083
-
SSDEEP
12288:mBKxeAPwAl/lRN2nRstEaauF/rGCoNPZSVH9ygRhfsl:jxL6rc4k5vsl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fb62cb172331bf6eed5289b64633e5e_JaffaCakes118
Files
-
2fb62cb172331bf6eed5289b64633e5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa3c928b70368642027ec59c605275bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
MultiByteToWideChar
SetHandleCount
GetDateFormatA
GetProcAddress
SetLastError
HeapReAlloc
Sleep
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
HeapAlloc
FreeEnvironmentStringsW
GetStdHandle
UnhandledExceptionFilter
GetModuleHandleA
SetUnhandledExceptionFilter
GetConsoleScreenBufferInfo
CompareStringA
TlsSetValue
GetTimeFormatA
LCMapStringA
GetLastError
IsValidLocale
TlsAlloc
EnumSystemLocalesA
HeapDestroy
DeleteCriticalSection
GetTempPathA
ExitProcess
GetTickCount
CompareStringW
LCMapStringW
HeapFree
GetModuleHandleW
GetModuleFileNameA
IsDebuggerPresent
LoadLibraryA
QueryPerformanceCounter
GetModuleFileNameW
VirtualAlloc
WaitCommEvent
GetFileType
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetOEMCP
GetStringTypeA
GetUserDefaultLCID
VirtualFree
FlushInstructionCache
SetEnvironmentVariableA
GetLocaleInfoA
GetSystemTimeAsFileTime
GetStartupInfoA
GetCPInfo
GetCurrentThread
GetStartupInfoW
GetStringTypeW
GetACP
WriteFile
TlsFree
IsValidCodePage
FreeLibrary
GetTimeZoneInformation
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
GetCommandLineW
HeapCreate
SetConsoleCtrlHandler
InterlockedExchange
InterlockedDecrement
HeapSize
GetLocaleInfoW
TlsGetValue
user32
LookupIconIdFromDirectory
GetSubMenu
DdeImpersonateClient
DrawAnimatedRects
ScrollDC
Sections
.text Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 279KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ