Static task
static1
Behavioral task
behavioral1
Sample
2f076778c74c392184647f17199a2670_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f076778c74c392184647f17199a2670_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f076778c74c392184647f17199a2670_JaffaCakes118
-
Size
169KB
-
MD5
2f076778c74c392184647f17199a2670
-
SHA1
fd2ccd685bb9bb05e21cd550108fd641b9d4c2df
-
SHA256
749bc8f0ffe6d2290225cecb847e250656bd21b19abc12e99f4902cfe805a5d6
-
SHA512
6001092d1c77766c73bc986904cf8acd21a0679367188d20e8b439ce30a32007b5f9393226286ce3d42c5752eacf97b7ad7237d0ac2eedb2997321f5bd32a368
-
SSDEEP
3072:YGCXtAAR6rwMuw4SJkTuxCHDQbQk2S3eFDaQDdpAQ9vPN8Vd7Cap3kbu7gQZO:zCXDmwMAqCjQck5enuCvPN8VNZxkbtx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f076778c74c392184647f17199a2670_JaffaCakes118
Files
-
2f076778c74c392184647f17199a2670_JaffaCakes118.exe windows:4 windows x86 arch:x86
6fcae73808113141c06135a6d1afa754
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstVolumeA
GetStartupInfoA
GetPriorityClass
TlsGetValue
EnumResourceTypesW
InitializeCriticalSection
TlsFree
TlsAlloc
HeapCreate
GetFileType
user32
LoadCursorW
RegisterClassExW
MessageBoxW
GetWindowInfo
GetDC
CreateWindowExW
GetUpdateRgn
EndDialog
oleacc
LresultFromObject
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 604B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.apexi Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ