Static task
static1
Behavioral task
behavioral1
Sample
2a80322137d486b1c35e2542ce7a07fe_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a80322137d486b1c35e2542ce7a07fe_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a80322137d486b1c35e2542ce7a07fe_JaffaCakes118
-
Size
173KB
-
MD5
2a80322137d486b1c35e2542ce7a07fe
-
SHA1
6f2309e630a05f511dfa98fa7b861558851cf96c
-
SHA256
e49a5c2ccc6381d4cc8fba2eef2600bf9c8e784686caf6522b3817c989ff6231
-
SHA512
8443ba41370828f35a8d7df72a6618a1d82b44c361d1b73f43efc009907e4146888422e26706550718c51fa95efeab4a2f960f660f18d9027dc95c95601baca1
-
SSDEEP
3072:0AeJ3hAszwhqKRVqzxLmTthRWok2SdsDt2tJswMqQzYta6fSQEoW+wqIZi:ReFhAszYRVCcPoB2SnUwMqQea6KVD+LM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a80322137d486b1c35e2542ce7a07fe_JaffaCakes118
Files
-
2a80322137d486b1c35e2542ce7a07fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
e6153ed3d5a9d2bf98ab05c7ee08f00a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathAddBackslashW
winmm
mciSendCommandW
sndPlaySoundW
setupapi
CM_Get_Depth_Ex
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status
kernel32
GetModuleHandleA
GetVersionExA
TlsAlloc
InterlockedDecrement
AddAtomW
TlsSetValue
TlsFree
GetVersionExW
CreateFileA
MapViewOfFile
UnmapViewOfFile
CreateFileW
GetTempPathW
FlushFileBuffers
LoadLibraryExW
GetEnvironmentVariableW
GetProcAddress
HeapFree
EnumResourceNamesA
SetLastError
InterlockedIncrement
GetConsoleCP
GetProcessHeap
GetLastError
GetConsoleMode
VerLanguageNameA
GetModuleHandleW
TlsGetValue
HeapAlloc
ExitProcess
CreateFileMappingA
WriteConsoleW
Sleep
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ