Static task
static1
Behavioral task
behavioral1
Sample
2f0f2fd4e5ff43fe78531d334a278be0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f0f2fd4e5ff43fe78531d334a278be0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f0f2fd4e5ff43fe78531d334a278be0_JaffaCakes118
-
Size
379KB
-
MD5
2f0f2fd4e5ff43fe78531d334a278be0
-
SHA1
9f60d9c80b642fa25c364e527cb8012d7195f92c
-
SHA256
09c29f454b239fe66a95bacfa9a23fbbe799469fa7644a8d71a61c0cefb6e5e9
-
SHA512
60d30dfd9413103e1fbe8f9fa592ac8fa51694d84b1d8730d76a1017726b0878de10a0405c044007ca3aa643e20fd2f70ed5b32788726b3e0ab3c601e09cc565
-
SSDEEP
6144:csNGSHuaHwwZqq2eIU58UXQUW/CyVkB3JWsjKzJfils3pAhHx6lC:csN4q2eIU/WKyVkB3ezBiW3pAhR6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f0f2fd4e5ff43fe78531d334a278be0_JaffaCakes118
Files
-
2f0f2fd4e5ff43fe78531d334a278be0_JaffaCakes118.exe windows:4 windows x86 arch:x86
bcd3846e1cd1d7e571637f31d3ee19c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
version
VerInstallFileA
VerFindFileA
GetFileVersionInfoA
user32
DrawAnimatedRects
EmptyClipboard
GetClientRect
GetWindowThreadProcessId
ScrollWindow
RemoveMenu
SetActiveWindow
TranslateMDISysAccel
GetDlgItem
ClientToScreen
UnregisterClassA
wsprintfA
EnumThreadWindows
DispatchMessageW
MoveWindow
EnableScrollBar
DrawTextA
GetScrollRange
ShowWindow
SetRect
PeekMessageA
SetWindowLongW
MsgWaitForMultipleObjects
GetFocus
LoadCursorA
DestroyWindow
DeleteMenu
GetKeyState
SetCursor
SetWindowPlacement
MessageBoxA
SetPropA
ChildWindowFromPoint
SetWindowPos
LoadBitmapA
PtInRect
GetCursorPos
GetScrollInfo
DrawIcon
IsDialogMessageA
EnumWindows
GetIconInfo
GetMenuItemID
MapWindowPoints
FindWindowA
KillTimer
GetWindow
GetWindowLongW
PeekMessageW
BeginPaint
CharUpperBuffA
ShowScrollBar
CreatePopupMenu
UnhookWindowsHookEx
GetWindowTextA
ScreenToClient
DefMDIChildProcA
LoadKeyboardLayoutA
CloseClipboard
GetMenu
GetForegroundWindow
GetTopWindow
IsWindowUnicode
RegisterClassA
CallWindowProcA
InflateRect
CharLowerBuffA
RegisterClipboardFormatA
RemovePropA
GetSystemMenu
GetMenuItemCount
InsertMenuA
RegisterWindowMessageA
DefWindowProcA
MessageBeep
GetWindowDC
LoadIconA
IsChild
IsDialogMessageW
FrameRect
CharNextW
OpenClipboard
CreateMenu
gdi32
GetObjectA
GetBitmapBits
CreatePenIndirect
CopyEnhMetaFileA
BitBlt
CreateFontIndirectA
kernel32
ExitProcess
ExitThread
GetModuleHandleA
GetProcAddress
VirtualAlloc
GetCommandLineA
GlobalAlloc
lstrlenA
VirtualAllocEx
IsBadReadPtr
LoadLibraryA
GetVersionExA
LocalAlloc
LoadLibraryExA
GetModuleHandleW
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES0 Size: 1024B - Virtual size: 613B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES7 Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES2 Size: 1024B - Virtual size: 554B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ