Static task
static1
Behavioral task
behavioral1
Sample
2e906f1565b08d884352b12b9a1c14dc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e906f1565b08d884352b12b9a1c14dc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e906f1565b08d884352b12b9a1c14dc_JaffaCakes118
-
Size
157KB
-
MD5
2e906f1565b08d884352b12b9a1c14dc
-
SHA1
a3349a1c6307f5afdd424f251daa78a58a5e8c12
-
SHA256
aa4bb67cd7fc503aea751ef6f109847d86a949fe69c0351abee55094e57252e1
-
SHA512
8da1da2bd4d05d74e8a6d6b0ae2d599e9daf66a08c1f73a2d8334eadd07f5e7b028476757ea96159fcd4d306f730526370c5afcdc41302f07c7b0f4ea62a9c23
-
SSDEEP
3072:6N+u1KFe2Fu0uvCrodJfecng9eviMK3S0Pl5Nq6JKczNhAU:Ml4kHAoXfeigcvzCS2l5NqCK+hAU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e906f1565b08d884352b12b9a1c14dc_JaffaCakes118
Files
-
2e906f1565b08d884352b12b9a1c14dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
ead318996d91f37d6dc58968346aeec3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
wsprintfW
KillTimer
SetTimer
SendMessageA
DispatchMessageW
CharUpperW
CharNextW
PostThreadMessageW
GetDC
GetMessageW
TranslateMessage
UnregisterClassA
shlwapi
PathCombineW
PathFileExistsW
ole32
CoTaskMemAlloc
CoRevokeClassObject
CoUninitialize
CoRegisterClassObject
CoTaskMemFree
CoInitialize
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
StringFromCLSID
kernel32
WideCharToMultiByte
lstrcpyA
InitializeCriticalSection
OutputDebugStringW
GetProcessAffinityMask
LockResource
GetACP
lstrcpyA
GetLastError
lstrcmpiW
EnumResourceNamesW
lstrlenW
lstrcpyW
GetTickCount
MultiByteToWideChar
GlobalAlloc
GlobalFree
FreeEnvironmentStringsW
FindClose
GetCPInfo
GetModuleHandleW
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ