Static task
static1
Behavioral task
behavioral1
Sample
2fbc1f60179440262c9144f2014da4f8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fbc1f60179440262c9144f2014da4f8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fbc1f60179440262c9144f2014da4f8_JaffaCakes118
-
Size
17KB
-
MD5
2fbc1f60179440262c9144f2014da4f8
-
SHA1
2161ba5847b4ff5c03e6fdad2038df546c9f15f2
-
SHA256
06b2d5de655b9361572090ba7e3d9ac8afe1d5ce5e93b8188813c1ed615ff52e
-
SHA512
90ac32085189eb7779be332fd368554b467f4eda0371fec31c6458dce340e84271cfa1bb9324f3358697ae2b3d5c57907235c129931f060af1b1f07bd3e016d2
-
SSDEEP
384:IRTysTA01xGw4WGef9msHe9WFTNvtQxVE:IRG4l1xGw4WGg9hHeIFT3B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fbc1f60179440262c9144f2014da4f8_JaffaCakes118
Files
-
2fbc1f60179440262c9144f2014da4f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
581b33db055f06aaa0c291dacb0a516f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
lstrcmpiA
GlobalAlloc
ReadFile
PeekNamedPipe
Sleep
CreateProcessA
GetStartupInfoA
CreateFileA
GetModuleFileNameA
GetCommandLineA
GetLastError
CreateMutexA
CreateDirectoryA
GetCurrentThreadId
GetModuleHandleA
WriteFile
CloseHandle
DeleteFileA
LoadLibraryA
CreatePipe
GetProcAddress
user32
GetInputState
PostThreadMessageA
GetMessageA
LoadCursorA
CopyIcon
SetSystemCursor
MessageBoxA
advapi32
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_except_handler3
_controlfp
__set_app_type
__getmainargs
_acmdln
strlen
strcpy
sprintf
memset
printf
strcat
memcpy
strstr
getchar
exit
fclose
fopen
strncpy
fread
fseek
__CxxFrameHandler
fscanf
remove
_exit
_XcptFilter
_strlwr
iphlpapi
GetAdaptersInfo
ws2_32
inet_addr
wininet
InternetCloseHandle
InternetReadFile
InternetOpenA
InternetOpenUrlA
Sections
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ