Static task
static1
Behavioral task
behavioral1
Sample
2fea757bf1503264dc4793dac31864a4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fea757bf1503264dc4793dac31864a4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fea757bf1503264dc4793dac31864a4_JaffaCakes118
-
Size
186KB
-
MD5
2fea757bf1503264dc4793dac31864a4
-
SHA1
563a5d3cc690f0f9c1d420f5d1ee6ba401b70097
-
SHA256
38e21164dca0b76c06bd8748b65895f77451bc943b5fd7446c2d0a89291f1007
-
SHA512
9b4c400cac5f13be5440c8e8ee8d1ac1ba1bf0418170c208375be52a317feaa388d255c76c1fc7c2e749d35a027ae8c6497c3f96896a5deebe2434313f628129
-
SSDEEP
3072:xTQYPSwLAh7/cBAC2+TKAaFT/2mxqKejHkkHtDokVG:xTEwLAh742+2Aa5ejky
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fea757bf1503264dc4793dac31864a4_JaffaCakes118
Files
-
2fea757bf1503264dc4793dac31864a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d74ea66d180d30466c7ce446a0795e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SafeArrayPtrOfIndex
kernel32
VirtualAlloc
IsBadReadPtr
LoadLibraryExA
GetProcAddress
LocalAlloc
GetVersionExA
GetCommandLineA
LoadLibraryA
GetCommandLineW
GetModuleHandleA
ExitThread
GlobalAlloc
ExitProcess
user32
GetCapture
FrameRect
gdi32
RestoreDC
GetPaletteEntries
SelectPalette
CreateCompatibleDC
GetBitmapBits
CopyEnhMetaFileA
GetPixel
CreateDIBSection
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES67 Size: 1024B - Virtual size: 683B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES44 Size: 512B - Virtual size: 267B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES01 Size: 1024B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES69 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES23 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES96 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES75 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES52 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ