Static task
static1
Behavioral task
behavioral1
Sample
2fa98dd2565cec25d329cb71d977660f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fa98dd2565cec25d329cb71d977660f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fa98dd2565cec25d329cb71d977660f_JaffaCakes118
-
Size
580KB
-
MD5
2fa98dd2565cec25d329cb71d977660f
-
SHA1
ea4ead679477817934cf36a61408d45562a26421
-
SHA256
db534838f09c895e660cd456c3f4fc181ecfdec4536f2debd9fbe59515011bb6
-
SHA512
4c4cef7936534aff3b8381ed08d97831229c63c319e918c7a3adc79c2f06b057a7d8a347b19013c21a9084b230e31202817d048ba5baddf03daad829f6b4e3da
-
SSDEEP
6144:skda+2mbalOX5ZyEWwRnJNGn84AgI8rlzM2YsCkbZRiY1VEpzlb91mzKr:7a+kO/51a8VgIwzM2jCkbzP12PGzG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fa98dd2565cec25d329cb71d977660f_JaffaCakes118
Files
-
2fa98dd2565cec25d329cb71d977660f_JaffaCakes118.exe windows:5 windows x86 arch:x86
1e0b4e54b3d72e829c76e91f2daf1c00
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
EnumDeviceDrivers
user32
ShowWindow
winmm
joyGetDevCapsA
kernel32
TlsAlloc
RaiseException
SetEvent
GetTickCount
VirtualFreeEx
Sleep
GetEnvironmentVariableA
GetLastError
GetProcAddress
VirtualAlloc
VirtualAllocEx
ReleaseMutex
CloseHandle
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetModuleHandleA
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadFile
CreateFileA
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 307KB - Virtual size: 307KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ