Static task
static1
Behavioral task
behavioral1
Sample
2e14b53dea0c94f4cf9389e99c943027_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e14b53dea0c94f4cf9389e99c943027_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e14b53dea0c94f4cf9389e99c943027_JaffaCakes118
-
Size
235KB
-
MD5
2e14b53dea0c94f4cf9389e99c943027
-
SHA1
68d59a832ee1dac731a29822de8b48e60431da20
-
SHA256
e656805254c9f714dea3b4f9006744011f0b57f2047514211e70c1868eb1b39e
-
SHA512
f6ba9e88f0654fbd8d206e4fd8667304d1279f8c03b626ca96d27a0e018a9582105e1ea1665a6cf2b95da29b7a3a04b56ce178cc1ea9fd46cb51921af29f69e4
-
SSDEEP
3072:v0xpsEmVMLFcOJYIZO+iO/5/rQ6PhA9SdK+pQ4J8/RCOv389snP8i+sf6iTWIJQ4:0nmoFUIZOadU2hAtAJ0C1kP8il6aQBG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e14b53dea0c94f4cf9389e99c943027_JaffaCakes118
Files
-
2e14b53dea0c94f4cf9389e99c943027_JaffaCakes118.exe windows:4 windows x86 arch:x86
41d32133cb1c17e882ed2ec1f2678672
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
HeapAlloc
ExitProcess
GetOEMCP
GetCommandLineA
GlobalFree
GetModuleFileNameA
GetCurrentThread
GetLocalTime
GetModuleHandleA
lstrcmpA
Sleep
HeapFree
GetFileSize
GetCurrentProcessId
GetCurrentProcess
GlobalAlloc
GetConsoleOutputCP
GetCurrentThreadId
lstrcatA
ExitProcess
HeapFree
ExitProcess
GetLastError
ExitProcess
lstrcpynA
ExitProcess
lstrcatA
ExitProcess
GetLocalTime
ExitProcess
GetCurrentProcessId
ExitProcess
GetFileSize
ExitProcess
GetModuleFileNameA
lstrcpynA
ExitProcess
GetFileSize
GetFileType
GetFileAttributesA
HeapAlloc
lstrcpyA
GetStringTypeA
GetCurrentThread
GetCurrentProcess
GetLocalTime
FreeLibrary
HeapFree
GetConsoleOutputCP
GetCurrentProcessId
DeleteFileA
GetLastError
GetOEMCP
lstrcatA
GlobalAlloc
Sleep
user32
LoadCursorA
AppendMenuA
EndDialog
GetWindowTextLengthA
DrawTextA
CalcMenuBar
CopyIcon
CloseWindow
LoadMenuA
CopyRect
GetWindowTextA
DrawIcon
GetDC
IsWindow
GetCursor
DrawTextW
GetDlgItem
CopyImage
CreateIcon
IsMenu
LoadMenuA
CopyRect
DrawTextA
AppendMenuA
GetDlgItem
LoadCursorA
DialogBoxParamA
AppendMenuW
GetMenu
IsWindow
CopyIcon
DrawTextW
GetWindowTextA
AlignRects
BlockInput
DialogBoxParamW
GetFocus
CloseWindow
Sections
.taat Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdada Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eddta Size: 2KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ