Static task
static1
Behavioral task
behavioral1
Sample
2bd62bf50cd0991ba1e450d8c72d47ac_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2bd62bf50cd0991ba1e450d8c72d47ac_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2bd62bf50cd0991ba1e450d8c72d47ac_JaffaCakes118
-
Size
209KB
-
MD5
2bd62bf50cd0991ba1e450d8c72d47ac
-
SHA1
491afa25ece91f8797015ff42a870e141b716d57
-
SHA256
dbb3f357c175775cff07df47c9027031fa7395ad45a241ba9ff99c333467d9f0
-
SHA512
1de2eb5c26a20597e489461a4b191b2cec9191d6557d07664d86095f9d6f7f0ee65735000de4e07aeaab407f62fe3704786ef95d237f1a98b726849d9f9e2f35
-
SSDEEP
6144:lkrnLna2Rvgn79Oud3PgDT5GuIUjvYPOyN:STa2Rvgn7jPgP5sUjvYW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bd62bf50cd0991ba1e450d8c72d47ac_JaffaCakes118
Files
-
2bd62bf50cd0991ba1e450d8c72d47ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc9fbbc00c4de713c67a08320ee4cc96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SafeArrayPtrOfIndex
SafeArrayGetUBound
SysAllocStringLen
SysFreeString
SafeArrayUnaccessData
RegisterTypeLib
SafeArrayGetElement
VariantChangeType
GetErrorInfo
user32
GetKeyboardState
DrawEdge
SetWindowTextA
GetKeyNameTextA
UnregisterClassA
wsprintfA
CreatePopupMenu
SendMessageW
TranslateMessage
IsZoomed
GetScrollInfo
GetDC
OffsetRect
CharToOemA
SetWindowPlacement
ScrollWindow
GetSysColorBrush
CloseClipboard
DefWindowProcA
InvalidateRect
ShowScrollBar
IsDialogMessageA
GetScrollRange
WindowFromPoint
DefFrameProcA
GetKeyboardLayout
DrawIconEx
ActivateKeyboardLayout
GetClassLongA
EndPaint
GetMenuItemCount
RegisterWindowMessageA
GetKeyState
DeleteMenu
AdjustWindowRectEx
SetCursor
CreateIcon
LoadCursorA
ShowWindow
SetPropA
ShowOwnedPopups
IsIconic
SetWindowLongA
PeekMessageA
GetDCEx
SetWindowLongW
DispatchMessageA
GetWindowDC
GetParent
GetMenuStringA
GetTopWindow
SetClassLongA
RegisterClassA
LoadIconA
DrawMenuBar
SystemParametersInfoA
CreateMenu
GetCursorPos
ReleaseDC
ScreenToClient
CharNextW
CreateWindowExA
MessageBeep
GetWindowPlacement
GetCapture
CharNextA
UpdateWindow
GetWindowLongA
CharLowerA
DrawIcon
DestroyIcon
GetLastActivePopup
PostQuitMessage
CheckMenuItem
ReleaseCapture
SetActiveWindow
OemToCharA
GetWindowThreadProcessId
EnumThreadWindows
SetTimer
PostMessageA
comdlg32
GetOpenFileNameA
FindTextA
kernel32
GetCommandLineA
LoadLibraryExA
GetModuleHandleA
LoadLibraryA
IsBadReadPtr
lstrlenA
ExitThread
ExitProcess
GetVersionExA
GetProcAddress
VirtualAllocEx
GlobalAlloc
Sections
CODE Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES9 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES7 Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ