Static task
static1
Behavioral task
behavioral1
Sample
2f8ca8935e7394c0f95a0d85fe8ba677_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2f8ca8935e7394c0f95a0d85fe8ba677_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f8ca8935e7394c0f95a0d85fe8ba677_JaffaCakes118
-
Size
265KB
-
MD5
2f8ca8935e7394c0f95a0d85fe8ba677
-
SHA1
1b7f7c2145d2cf74d53f1e98ae24ba184ff1e5ac
-
SHA256
bc8b0313bbe92c62217a3614042d55792da79f7e48fbd6cc298da252acf9af6c
-
SHA512
34869489fc644f73d9bc485ae7761e3894027a00eb3f8ab062b5ee21099a9e353fa5ddd16caee753402535b6bc5ea21b57445227a25008a6e78962ceb82da1a5
-
SSDEEP
6144:LksxBDaXKLE/fo1By4KvJAxcaDSP2NLbQK/G93Oa9MH:Lk6oyBBMiNDNLbQZYas
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f8ca8935e7394c0f95a0d85fe8ba677_JaffaCakes118
Files
-
2f8ca8935e7394c0f95a0d85fe8ba677_JaffaCakes118.exe windows:4 windows x86 arch:x86
db50255500657aa32aef5fe99b5d048e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersion
SetStdHandle
GetModuleHandleA
InterlockedDecrement
SetFileAttributesW
GetTimeFormatA
SetUnhandledExceptionFilter
GetACP
FindFirstFileA
GetCurrentProcess
GetOEMCP
CreateFileW
UnhandledExceptionFilter
GetCurrentThreadId
GetStartupInfoA
QueryPerformanceCounter
GetFileType
GetCommandLineA
GetProcessHeap
FindResourceExW
CreateFileA
GetCurrentProcessId
GetLastError
MultiByteToWideChar
VirtualProtect
ExitProcess
GetCommandLineW
Sleep
SetConsoleCP
GetTickCount
HeapAlloc
GetSystemTime
user32
GetWindowLongW
GetClientRect
SendDlgItemMessageA
LoadStringA
DispatchMessageW
TranslateMessage
UnregisterClassA
GetFocus
gdi32
GetTextExtentPoint32W
advapi32
RegEnumValueA
RegQueryValueExA
RegDeleteKeyW
msvcrt
_onexit
_amsg_exit
lz32
LZDone
ole32
CoMarshalHresult
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ