Static task
static1
Behavioral task
behavioral1
Sample
2f138685afe67d00a920f7693c28f3a4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f138685afe67d00a920f7693c28f3a4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f138685afe67d00a920f7693c28f3a4_JaffaCakes118
-
Size
236KB
-
MD5
2f138685afe67d00a920f7693c28f3a4
-
SHA1
96592d4c5818fa18c390d23daade82eba09dc47e
-
SHA256
a526c1e38ea463d49c45675120d58248ac61148f37d94f1c95f2bda08ac33251
-
SHA512
06746217c6c6949bfc7fceb1d32a83968ed08f1cec4034fc31573c58a9b745ad2db530b041aaa425fe115cc4c73d7086c63751a2c56c1b2c59c57549389105f2
-
SSDEEP
6144:MHol4kvUYxTIrinWB3J0k66WyxTU0mCacFpL0:JlrtxTkq63Ck66WyT9Nf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f138685afe67d00a920f7693c28f3a4_JaffaCakes118
Files
-
2f138685afe67d00a920f7693c28f3a4_JaffaCakes118.exe windows:5 windows x86 arch:x86
b52cf2c743bfb71fa69c16695a772737
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
lstrcmpiA
lstrlenA
GetModuleFileNameA
lstrcmpA
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
VirtualFree
UnmapViewOfFile
VirtualAlloc
CloseHandle
MapViewOfFileEx
CreateFileMappingA
OpenFileMappingA
LeaveCriticalSection
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
lstrcatA
lstrcpyA
FreeLibrary
TerminateThread
WaitForSingleObject
GetFileAttributesExA
ExpandEnvironmentStringsA
GetTickCount
lstrcpynA
DeleteCriticalSection
SearchPathA
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
Sleep
RtlUnwind
GetLastError
CreateThread
GetCurrentThreadId
ExitThread
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
MultiByteToWideChar
ReadFile
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
FlushFileBuffers
HeapAlloc
HeapSize
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
SetStdHandle
InitializeCriticalSectionAndSpinCount
CreateFileA
WriteConsoleA
GetConsoleOutputCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
user32
GetParent
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyExA
ole32
CoInitialize
Sections
.text Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE