Static task
static1
Behavioral task
behavioral1
Sample
2db880e1f32462db2bd634b74a8b332b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2db880e1f32462db2bd634b74a8b332b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2db880e1f32462db2bd634b74a8b332b_JaffaCakes118
-
Size
209KB
-
MD5
2db880e1f32462db2bd634b74a8b332b
-
SHA1
d90beebca0b187b85f39f7ec1fcc7e8323995dff
-
SHA256
e3522cc1a518c5c0c7150d1a628ff7fc810e1f4d46913128c8a411b8db7b9e9f
-
SHA512
1584d1e810597e84924a25cb3859897742d1d0d791fa911a2a00e57df5a2682ec68cf93f64d65022d819c67649bab7639c5c51452387562f0dbd8e613f999d68
-
SSDEEP
6144:lkrnLna2Rvgn79Oud3PMDT5GuIUjvYPOyN:STa2Rvgn7jPMP5sUjvYW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2db880e1f32462db2bd634b74a8b332b_JaffaCakes118
Files
-
2db880e1f32462db2bd634b74a8b332b_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc9fbbc00c4de713c67a08320ee4cc96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SafeArrayPtrOfIndex
SafeArrayGetUBound
SysAllocStringLen
SysFreeString
SafeArrayUnaccessData
RegisterTypeLib
SafeArrayGetElement
VariantChangeType
GetErrorInfo
user32
GetKeyboardState
DrawEdge
SetWindowTextA
GetKeyNameTextA
UnregisterClassA
wsprintfA
CreatePopupMenu
SendMessageW
TranslateMessage
IsZoomed
GetScrollInfo
GetDC
OffsetRect
CharToOemA
SetWindowPlacement
ScrollWindow
GetSysColorBrush
CloseClipboard
DefWindowProcA
InvalidateRect
ShowScrollBar
IsDialogMessageA
GetScrollRange
WindowFromPoint
DefFrameProcA
GetKeyboardLayout
DrawIconEx
ActivateKeyboardLayout
GetClassLongA
EndPaint
GetMenuItemCount
RegisterWindowMessageA
GetKeyState
DeleteMenu
AdjustWindowRectEx
SetCursor
CreateIcon
LoadCursorA
ShowWindow
SetPropA
ShowOwnedPopups
IsIconic
SetWindowLongA
PeekMessageA
GetDCEx
SetWindowLongW
DispatchMessageA
GetWindowDC
GetParent
GetMenuStringA
GetTopWindow
SetClassLongA
RegisterClassA
LoadIconA
DrawMenuBar
SystemParametersInfoA
CreateMenu
GetCursorPos
ReleaseDC
ScreenToClient
CharNextW
CreateWindowExA
MessageBeep
GetWindowPlacement
GetCapture
CharNextA
UpdateWindow
GetWindowLongA
CharLowerA
DrawIcon
DestroyIcon
GetLastActivePopup
PostQuitMessage
CheckMenuItem
ReleaseCapture
SetActiveWindow
OemToCharA
GetWindowThreadProcessId
EnumThreadWindows
SetTimer
PostMessageA
comdlg32
GetOpenFileNameA
FindTextA
kernel32
GetCommandLineA
LoadLibraryExA
GetModuleHandleA
LoadLibraryA
IsBadReadPtr
lstrlenA
ExitThread
ExitProcess
GetVersionExA
GetProcAddress
VirtualAllocEx
GlobalAlloc
Sections
CODE Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES9 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES7 Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ