Static task
static1
Behavioral task
behavioral1
Sample
2a428b911eeb7ab9e791d8f589cdc796_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a428b911eeb7ab9e791d8f589cdc796_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a428b911eeb7ab9e791d8f589cdc796_JaffaCakes118
-
Size
80KB
-
MD5
2a428b911eeb7ab9e791d8f589cdc796
-
SHA1
f86f5aa242b940c9339684ac0e21ef403d23d944
-
SHA256
f6d6093bfe0fec4bd0bad5fc55f52934e1bafdadbd102ce9759a477e7f143be6
-
SHA512
4e108c142d6d93a4e8576b4a8353f9f8c8aa8582d3277cdd971f26d883213f22d982f2283aff7be9f869b3a62aeae2f885dca23743823150e57eae3d949859a1
-
SSDEEP
1536:N/rrzDomyGlyXSGheGM7/nVcJVwhtwpcFazz3wZlOIwDBEoC:NDDjyXdheNrnVc+sUe9BEoC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a428b911eeb7ab9e791d8f589cdc796_JaffaCakes118
Files
-
2a428b911eeb7ab9e791d8f589cdc796_JaffaCakes118.exe windows:4 windows x86 arch:x86
c791b8db48fe14388ba83d8bbf4dae45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
LoadResource
FindResourceW
GetCurrentProcessId
GetVersion
QueryPerformanceCounter
LockResource
GetModuleHandleA
DeviceIoControl
GetCPInfo
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStringTypeW
user32
LoadIconA
GetClientRect
EndDialog
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
LoadStringA
DefWindowProcA
FindWindowA
DialogBoxParamA
DestroyWindow
BeginPaint
EndPaint
CreateWindowExA
ShowWindow
UpdateWindow
wsprintfA
DrawTextA
GetSysColor
LoadCursorA
gdi32
TextOutA
Rectangle
CreateBitmap
advapi32
RegOpenKeyExA
RegCloseKey
RegSetValueExW
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODEA Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 171B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ