Static task
static1
Behavioral task
behavioral1
Sample
2d019aa4e4fd4b74e422d666c0dbd106_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d019aa4e4fd4b74e422d666c0dbd106_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d019aa4e4fd4b74e422d666c0dbd106_JaffaCakes118
-
Size
146KB
-
MD5
2d019aa4e4fd4b74e422d666c0dbd106
-
SHA1
e592bda39f5d14d9e9f5d0d3d807072319e9350a
-
SHA256
1decef3f38a59df86d43cfae2b09f1370d2977bea4a36d4bcbcde5ecfc0428eb
-
SHA512
ea36373aa68927909153d3bc4821e2c042ef2a40b03cddba3c9519ea6ba6d1d9cc13cfdf9b2e2cf714e82b0510aa0e3eae3cc194e02f32e5269c0ac0fca7bd5f
-
SSDEEP
3072:nLSQS1SNT3aykHzSlW08ry7S8tagvtxqimLAqo/CCpQaLarZ24gee4geib:BrkjaSmpxlmLmbQaW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d019aa4e4fd4b74e422d666c0dbd106_JaffaCakes118
Files
-
2d019aa4e4fd4b74e422d666c0dbd106_JaffaCakes118.exe windows:4 windows x86 arch:x86
5fd7c12ab3f445d38d54dbdf13a4808b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
CreateProcessA
DeleteFileA
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FlushInstructionCache
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileTime
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemDirectoryA
GetThreadPriority
GetThreadSelectorEntry
GetTickCount
GetUserDefaultLCID
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MoveFileA
MulDiv
MultiByteToWideChar
OpenProcess
RaiseException
ReadFile
RtlUnwind
SearchPathA
SetConsoleCtrlHandler
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetPriorityClass
SetThreadLocale
SetThreadPriority
Sleep
SuspendThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VerLanguageNameA
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
lstrcmpiW
lstrcpyA
lstrcpyW
lstrlenW
user32
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
MapDialogRect
MapVirtualKeyA
MessageBoxA
MoveWindow
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PostThreadMessageA
RedrawWindow
RegisterClassA
ReleaseCapture
ReleaseDC
RemoveMenu
advapi32
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 127KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ