Static task
static1
Behavioral task
behavioral1
Sample
2f3246995c09e2c7dca2627f39b63026_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2f3246995c09e2c7dca2627f39b63026_JaffaCakes118
-
Size
67KB
-
MD5
2f3246995c09e2c7dca2627f39b63026
-
SHA1
318025ef4535bb420d5dddf085a3b9ace3c6db28
-
SHA256
d7b8e57acceb17748b2ddcba914302e44dd542da5648d89c167c9002a12603cc
-
SHA512
2c9d078a6b369536bd01ecc0625c4e775565433923bd6cf81d0e251c69f67e31b5b033ca66376ce59ad7d2a6c8983ab1eb738b1241cd0d2c8691974868f2365d
-
SSDEEP
768:kbXr5Qh0vqG6bveBlmywjgwr5byWFGIyR2GO7jwdwDocVLBisGQk:k+h0vqG+venmywjg45bRFNEOcaVNis3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f3246995c09e2c7dca2627f39b63026_JaffaCakes118
Files
-
2f3246995c09e2c7dca2627f39b63026_JaffaCakes118.exe windows:5 windows x86 arch:x86
5ba9db9722ed493d5f38c665b3f2d070
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
wcsstr
wcstoul
wcstol
_flushall
fgetwc
_vsnwprintf
_iob
wcslen
calloc
wcscat
wcschr
free
wcscpy
_wcsicmp
advapi32
RegSaveKeyW
RegRestoreKeyW
RegDeleteValueW
RegLoadKeyW
RegUnLoadKeyW
RegSetValueExA
RegSetValueW
RegFlushKey
RegCreateKeyW
RegEnumKeyW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegConnectRegistryW
RegCloseKey
RegDeleteKeyW
kernel32
MultiByteToWideChar
LocalAlloc
GetCurrentProcess
GetLastError
FormatMessageW
LocalFree
LoadLibraryW
GetProcAddress
ReadFile
SetLastError
lstrlenW
CloseHandle
lstrcpyW
CreateFileW
OutputDebugStringW
SetFilePointer
GetFileSize
SearchPathW
GetModuleHandleA
WriteFile
WideCharToMultiByte
WriteConsoleW
GetStdHandle
lstrcmpW
FreeLibrary
user32
LoadStringW
wsprintfW
MessageBoxW
CharUpperW
IsCharAlphaNumericW
CharNextW
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE