Static task
static1
Behavioral task
behavioral1
Sample
2d347de00bca2d3c97a8c86e13ea9e96_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d347de00bca2d3c97a8c86e13ea9e96_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d347de00bca2d3c97a8c86e13ea9e96_JaffaCakes118
-
Size
363KB
-
MD5
2d347de00bca2d3c97a8c86e13ea9e96
-
SHA1
2b147294057a0b8d55116f6a56d4284ce2963d77
-
SHA256
1a204beb9e0d4f8f592e1191e56baf71e6d74f74f9acfa2b63613b7e74cc70da
-
SHA512
cd1b2fd6e9b2188146035caffc8dd87540b69c3ab91f8d7d7f8d24886e4248cf4522f5d5e4198c2fa0fcf65a5397ad2b6f0651d7a69c0bfdfc5f1b0922bcefd7
-
SSDEEP
6144:XAJCyCCjsvN+nz7OMpxG71yuFpD3c9Ccv08R3m7TYHzXM:XAJCyNyC3m73c84xOc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d347de00bca2d3c97a8c86e13ea9e96_JaffaCakes118
Files
-
2d347de00bca2d3c97a8c86e13ea9e96_JaffaCakes118.exe windows:5 windows x86 arch:x86
71a2b8049865ccfc3e03ef0df077f003
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
DeviceIoControl
DuplicateHandle
ExitProcess
FormatMessageA
GetCommConfig
GetCommandLineA
GetCurrentProcess
CloseHandle
GetModuleHandleA
GetOverlappedResult
GetTickCount
LocalFree
OpenProcess
WaitForSingleObject
lstrcpyA
lstrlenA
GetCurrentThread
GetOEMCP
CreateFileA
VirtualAlloc
GetProcessHeap
GetLastError
ReadFile
user32
GetDC
GetMessageA
GetWindowRect
GetWindowTextA
IsDialogMessageA
KillTimer
LoadBitmapA
LoadImageA
LoadStringA
PostQuitMessage
RegisterClassA
ReleaseDC
ScreenToClient
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetForegroundWindow
SetTimer
SetWindowPos
SetWindowTextA
ShowWindow
TranslateMessage
UnregisterClassA
wsprintfA
DispatchMessageA
DestroyWindow
DestroyIcon
DefWindowProcA
CreateDialogParamA
LoadIconW
LoadIconA
LoadCursorA
GetDlgItem
gdi32
GetStockObject
advapi32
RegDeleteKeyW
RegEnumKeyW
RegQueryInfoKeyW
RegOpenKeyA
shell32
Shell_NotifyIconA
msvcrt
memmove
_vsnwprintf
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 313KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ