Static task
static1
Behavioral task
behavioral1
Sample
2d7dd1b6dc00934006432c15e0e6f379_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d7dd1b6dc00934006432c15e0e6f379_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d7dd1b6dc00934006432c15e0e6f379_JaffaCakes118
-
Size
52KB
-
MD5
2d7dd1b6dc00934006432c15e0e6f379
-
SHA1
9014120a964a1b7364fca4fdb10c77212d77fba5
-
SHA256
e1df81059631c6a43dfb327d51b705b621d8c72139e4dc8638b929740ab6d6c5
-
SHA512
597dbab25508aa76e4a90524bdb3228755ed481e50988e8bafec247145bc3653276909c6f3919880b9333b6ae538703fd2aac22ab773271aeb8006905a0e3d3a
-
SSDEEP
768:cmyGsYOKNGa/EzwposiGPsZYzrwbKnBWtLyQmVfAmmMKutAY+q+f5c3aF7kC2:NyGgMrkZMrzBWvyAyi5c3axkj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d7dd1b6dc00934006432c15e0e6f379_JaffaCakes118
Files
-
2d7dd1b6dc00934006432c15e0e6f379_JaffaCakes118.exe windows:5 windows x86 arch:x86
a3642e74c480ad99c4d3b94fb111ea60
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
lstrlenA
GetLocalTime
lstrcpyA
GetTempPathA
GetVersion
CloseHandle
FindAtomA
WriteFile
CreateFileA
GetLastError
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetSystemTime
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
user32
GetWindowRect
GetFocus
InflateRect
GetCaretPos
EqualRect
ClientToScreen
IsWindowVisible
GetCursorPos
wsprintfA
shlwapi
SHGetValueA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE