Static task
static1
Behavioral task
behavioral1
Sample
2fedf9a300133645b8b3e39e02897272_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fedf9a300133645b8b3e39e02897272_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fedf9a300133645b8b3e39e02897272_JaffaCakes118
-
Size
2.4MB
-
MD5
2fedf9a300133645b8b3e39e02897272
-
SHA1
7a84014a4f4af5fab2534cd57320590b17ff9bc1
-
SHA256
66032fc1e7bc63d40ac89adb2312d088d7e5f99c39c1e0399023b471d0ac4d6c
-
SHA512
5c408a5bbd51be0445b2fd39fa752bc54fbedb5207fcc16c3cd00bea1ca94c395dfe5a0e462994a2373b10124c569d29c94c53ac53bc5b5120560f8727f63f3d
-
SSDEEP
49152:6/p8ROdZ00pI3QNU/wsrpRqI3nq8RtdUJ7fhqiN3p5VlL6W77eP:Q8ReYmywIp/68NUJ7fhqiN5/lL6WPM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fedf9a300133645b8b3e39e02897272_JaffaCakes118
Files
-
2fedf9a300133645b8b3e39e02897272_JaffaCakes118.exe windows:5 windows x86 arch:x86
ce42df119b5092488db5e22e918936a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
FindResourceExW
TerminateThread
GetLastError
VirtualAllocEx
LZSeek
MultiByteToWideChar
SetHandleInformation
GlobalFindAtomA
GetCurrentThread
ResetEvent
SetConsoleCP
OpenThread
GetProcessTimes
OpenThread
GetModuleHandleA
SetFileAttributesA
GetConsoleCursorInfo
user32
GetRawInputDeviceInfoA
EnumWindowStationsA
InsertMenuA
RegisterShellHookWindow
ModifyMenuA
DrawCaptionTempA
DrawMenuBar
GetRawInputDeviceInfoA
ReasonCodeNeedsBugID
ShowCursor
SwitchDesktop
OemToCharBuffA
OemToCharBuffW
GetKeyboardLayout
ScrollDC
SystemParametersInfoA
TranslateAcceleratorA
LoadKeyboardLayoutEx
GetInternalWindowPos
SetProcessWindowStation
PostQuitMessage
ModifyMenuA
SetWindowLongA
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 17.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1023KB - Virtual size: 1023KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ