Static task
static1
Behavioral task
behavioral1
Sample
2fd424bfcc9a33fc96f2c6e9038c4f0b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2fd424bfcc9a33fc96f2c6e9038c4f0b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fd424bfcc9a33fc96f2c6e9038c4f0b_JaffaCakes118
-
Size
116KB
-
MD5
2fd424bfcc9a33fc96f2c6e9038c4f0b
-
SHA1
250bf2ca9231998acd8cc711b10137f0727471a2
-
SHA256
b9c3a2428443bf071e3299b82805337e3fdd75bc5e8b38c20c8cdabc12e2d46d
-
SHA512
0c1537cec60c10df2299bd1ace06f7fe82ea5d4da1c0cde8f52fe2ea708343f648c0488e25d41429540299c65c1a31b6dcdb997fc9864247cefadf9b62eb3988
-
SSDEEP
1536:VcjmQ7sTI3mYqQzFHH+gCAa3EY4PGZlQJD5RB8x9qI0hGa9jhkvpmIvlrXUSmQ:V8mQIM3mO+gru7QJD5RGP5NWF2pmIxU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fd424bfcc9a33fc96f2c6e9038c4f0b_JaffaCakes118
Files
-
2fd424bfcc9a33fc96f2c6e9038c4f0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
a528622183c0eff3d09e7f96bc3b2752
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOverlappedResult
GetConsoleKeyboardLayoutNameA
DeleteCriticalSection
SetHandleCount
CompareStringA
CreateTapePartition
SetConsoleInputExeNameA
GetACP
CallNamedPipeA
GetComputerNameExA
MapUserPhysicalPages
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
.rc3sec0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rc3sec1 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rc3sec2 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rc3sec3 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ