Static task
static1
Behavioral task
behavioral1
Sample
2e4994de2f17ca1f5138b666bc1d7060_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e4994de2f17ca1f5138b666bc1d7060_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e4994de2f17ca1f5138b666bc1d7060_JaffaCakes118
-
Size
170KB
-
MD5
2e4994de2f17ca1f5138b666bc1d7060
-
SHA1
d7f38e1206043e486643cf61980dffbc0f08f3f9
-
SHA256
6bc9a1b52582a05d1a79fff4dad4e6cfb2c14b7dbf9c2db4ba5e49e8bbd657b6
-
SHA512
d8ebacd7ff4f9513c68a031a2bbcfce518acf15adb0952c0dfb1fd5a91fd0bc669d973939688e681615c0b038164ddba28315a1a2f713d248b5022692817edc3
-
SSDEEP
3072:1YdJ1yQgT8RpGIIQ/IfaUYM3RPn84nGapYQuUutmHJNu10f4HLPNLrWi0:W3A8JnIyUYgRPn84nGamXUqmHJNuQ4HQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e4994de2f17ca1f5138b666bc1d7060_JaffaCakes118
Files
-
2e4994de2f17ca1f5138b666bc1d7060_JaffaCakes118.exe windows:1 windows x86 arch:x86
bb672c8748bf30a5ee2fd933f225d6ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptStringToBinaryA
shlwapi
PathAddExtensionW
PathFileExistsW
user32
FindWindowW
GetDC
GetParent
LoadCursorW
LoadIconW
RegisterClassW
ReleaseDC
kernel32
CloseHandle
CreateMutexA
CreateMutexW
DeleteFileW
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileTime
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTickCount
LoadLibraryA
LoadLibraryW
OpenProcess
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
lstrcatW
lstrcmpiW
lstrcpyW
lstrlenW
CreateFileW
advapi32
DuplicateTokenEx
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
Sections
AUTO Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 117KB - Virtual size: 355KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ