0LoSF@24
Static task
static1
Behavioral task
behavioral1
Sample
2a7b9f24d0682c5105ed6c6f77fefe8f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2a7b9f24d0682c5105ed6c6f77fefe8f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a7b9f24d0682c5105ed6c6f77fefe8f_JaffaCakes118
-
Size
146KB
-
MD5
2a7b9f24d0682c5105ed6c6f77fefe8f
-
SHA1
28fe4696f6826bed013aea7eff69c4e3707f65b1
-
SHA256
655248d3d75abea9b4a1390264dc17723d43a8ff11a9e0e0ca827b377a97f343
-
SHA512
be571891b792a6e4b5c7c593c6e50b410f40602944fb29ab37c7bf22eb08b89cef0f115967bbde7c12b82e329a0b46b7586083263a895515452a8277024c504e
-
SSDEEP
3072:Nbm0wup5r9NmmZWM0Rr2IsQo/l5KLTCY3R6h6vf0W0ugxyzqwcg3F+RlpppSK:NbmQ5Nz/0t2IsQod5cHBCAf0Y3qwJIRV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a7b9f24d0682c5105ed6c6f77fefe8f_JaffaCakes118
Files
-
2a7b9f24d0682c5105ed6c6f77fefe8f_JaffaCakes118.exe windows:4 windows x86 arch:x86
4b9b1691bad02d7ba6f1d073025a868c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyA
RegCreateKeyExA
kernel32
SetHandleCount
GlobalFindAtomA
GetOEMCP
GetVersion
GetCommandLineA
VirtualAlloc
VirtualAllocEx
LoadLibraryExA
HeapDestroy
LoadLibraryA
GlobalDeleteAtom
MoveFileExA
MulDiv
GetDateFormatA
GetCurrentThreadId
LocalAlloc
MoveFileA
FreeLibrary
GetStringTypeA
GetFileAttributesA
GetStartupInfoA
ExitProcess
lstrlenW
user32
CharNextW
SetWindowTextA
DrawAnimatedRects
IsWindowUnicode
GetSystemMenu
MoveWindow
InsertMenuItemA
TranslateMessage
DestroyWindow
ShowWindow
GetWindowThreadProcessId
ShowOwnedPopups
RegisterClipboardFormatA
DestroyCursor
DrawIcon
GetPropA
IsZoomed
GetTopWindow
CloseClipboard
GetCapture
SetCapture
DispatchMessageA
GetWindowLongA
CreateIcon
GetScrollPos
DefFrameProcA
GetClipboardData
GetLastActivePopup
MessageBoxA
MapVirtualKeyA
PeekMessageA
GetMenuItemInfoA
UnhookWindowsHookEx
CreateMenu
EnableMenuItem
EqualRect
GetMenu
GetKeyboardLayoutNameA
GetMenuItemCount
CallWindowProcA
GetClassInfoA
ClientToScreen
LoadIconA
GetMenuState
IsChild
GetScrollRange
GetWindowDC
KillTimer
SetForegroundWindow
DrawFrameControl
MsgWaitForMultipleObjects
SetRect
IsCharLowerA
GetKeyNameTextA
GetSysColorBrush
SetWindowsHookExA
SetActiveWindow
GetDesktopWindow
DrawMenuBar
SendMessageA
GetSysColor
DrawIconEx
PtInRect
BeginPaint
comctl32
ImageList_GetBkColor
ImageList_Read
ImageList_Remove
ImageList_DragShowNolock
ImageList_Destroy
ImageList_DrawEx
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.badata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ