f:\losyalqc\eaela\fyvhptozf\vaqwacsf\xfmazts
Static task
static1
Behavioral task
behavioral1
Sample
2fe3b96e271fdbe35f9fe2dbbea70407_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fe3b96e271fdbe35f9fe2dbbea70407_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fe3b96e271fdbe35f9fe2dbbea70407_JaffaCakes118
-
Size
371KB
-
MD5
2fe3b96e271fdbe35f9fe2dbbea70407
-
SHA1
fd24111c50b9adc83db391272000b200c7223af4
-
SHA256
b21a688377a1a6357fc57c1ce161b19f3e63af0ccc17b643c18fd5d482412da0
-
SHA512
6dbf2bc5b8e7d93865a665ea1294b8cab22c8f18e587b4a78300d1408ee057e05d2c8be1151669bbaa98dcfc5714d06ca983217cf8fc49de774ce70eb765b3c4
-
SSDEEP
6144:L8qfAHvvcpFjy7vz1okEsP6FVeyvwb/Tq4p3Iiv+icUx6iCJteIEyG1z:sHvvYFjy7vz1VEsSFOq4p3f+i36FJtnE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fe3b96e271fdbe35f9fe2dbbea70407_JaffaCakes118
Files
-
2fe3b96e271fdbe35f9fe2dbbea70407_JaffaCakes118.exe windows:4 windows x86 arch:x86
06e1af3d51858848046a5c1aadf03c37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
TerminateProcess
TlsSetValue
OpenMutexA
GetSystemTime
VirtualAlloc
GetTimeZoneInformation
TlsFree
DeleteCriticalSection
MultiByteToWideChar
WriteFile
QueryPerformanceCounter
GetCurrentThread
TlsGetValue
CompareStringW
HeapReAlloc
GetStartupInfoA
GetCPInfo
SetEnvironmentVariableA
CompareStringA
GetCurrentProcess
FreeEnvironmentStringsA
VirtualQuery
ExitProcess
GetStringTypeA
IsBadWritePtr
GetStringTypeW
GetACP
GetProcAddress
GetCurrentProcessId
InterlockedExchange
HeapDestroy
LeaveCriticalSection
GetOEMCP
GetTickCount
VirtualFree
HeapCreate
LoadLibraryA
GetLastError
GetModuleHandleA
LCMapStringW
EnterCriticalSection
HeapFree
CloseHandle
LCMapStringA
TlsAlloc
GetModuleFileNameA
ReadFile
FlushFileBuffers
GetSystemTimeAsFileTime
InitializeCriticalSection
CreateMutexA
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
HeapAlloc
SetStdHandle
GetVersion
GetCurrentThreadId
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetLocalTime
WideCharToMultiByte
SetLastError
GetCommandLineA
InterlockedIncrement
InterlockedDecrement
GetEnvironmentStrings
user32
RegisterClassExA
GetMessageExtraInfo
LockWindowUpdate
CreateMDIWindowA
RegisterClassA
OemToCharBuffA
VkKeyScanExW
RegisterDeviceNotificationW
comctl32
InitCommonControlsEx
Sections
.text Size: 249KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ