Static task
static1
Behavioral task
behavioral1
Sample
2f69faa2bacccf5a61b7c7996c558f4c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f69faa2bacccf5a61b7c7996c558f4c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f69faa2bacccf5a61b7c7996c558f4c_JaffaCakes118
-
Size
328KB
-
MD5
2f69faa2bacccf5a61b7c7996c558f4c
-
SHA1
172c3b8d22eb08f491d4c90cd86aaa21b95f5b95
-
SHA256
ac4a172dd0cec7582090313549f3adbba96a7aa11a1bb85f39da11246fa73585
-
SHA512
712184c799086b5c03605ede0adac41695d620aaa5fe74dee82e30e4fa4d440672b2b2af473233c99de17bce511ccd7641b9562363aa875d6e954554d6f38578
-
SSDEEP
6144:F4MKA86q6kcKPqCAOFPmvSNQgstAw/u5jp2hnU4ZcRdN1Sgg68:F9x1KNRmKN+/Mk3eBU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2f69faa2bacccf5a61b7c7996c558f4c_JaffaCakes118
Files
-
2f69faa2bacccf5a61b7c7996c558f4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
86ff4de26ca2fa1f851d621a2cd4bdf0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
imm32
ImmDestroyContext
comdlg32
PageSetupDlgA
ChooseColorW
setupapi
SetupBackupErrorW
msvcrt
isalnum
memcpy
wcstoul
user32
GetClassNameA
GetShellWindow
kernel32
lstrlenW
GetCommandLineW
GetModuleHandleA
GetFirmwareEnvironmentVariableW
GetModuleFileNameW
GetTapeStatus
CreateThread
HeapWalk
DeleteTimerQueue
SetFirmwareEnvironmentVariableW
urlmon
CoInternetCombineUrl
pdh
PdhGetCounterInfoA
ntdsapi
DsFreeSpnArrayW
ole32
HMENU_UserUnmarshal
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 310KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CONST Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qr Size: 180KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ