GetCaptureDeviceFormat
Static task
static1
Behavioral task
behavioral1
Sample
2fdd6e7540c3527a91d75a9873522a61_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2fdd6e7540c3527a91d75a9873522a61_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fdd6e7540c3527a91d75a9873522a61_JaffaCakes118
-
Size
42KB
-
MD5
2fdd6e7540c3527a91d75a9873522a61
-
SHA1
fa9a3a01b600a3ac3b95e09e044b648adffb241a
-
SHA256
b974c702e5ea123b94e7f5a0f580d839f8bcdf4e822df420e1c8b92f3a4fd27c
-
SHA512
bb6be1098e4ca648b3b8d66a74321a5e7ff5ef8d1c43a4f938a6ef636c0695bbb7328509d28c603031b61d22c0d475ede0f5a57fc1bb42d12cb290dc1c8a5dee
-
SSDEEP
768:i2xVAthFpf3mKPvwahuSVrkzRFZDngFk75xJ4aZM4OehNotDZqa7:BudDvwahuSVYdDYk+Zd57
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fdd6e7540c3527a91d75a9873522a61_JaffaCakes118
Files
-
2fdd6e7540c3527a91d75a9873522a61_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c13e0915fcbedf69c0555ba27f4eba4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ExitProcess
ExitThread
FindResourceA
GetACP
GetCommandLineA
GetDriveTypeA
GetExitCodeThread
GetLastError
GetModuleHandleA
GetNumberFormatA
GetOEMCP
GetPriorityClass
GetStartupInfoA
GetSystemInfo
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
MultiByteToWideChar
PulseEvent
RaiseException
ResetEvent
ResumeThread
RtlUnwind
SetLastError
SetThreadAffinityMask
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
VirtualQueryEx
lstrcpynA
msvcrt
__p__commode
__set_app_type
_cexit
exit
free
strspn
__getmainargs
user32
BeginDeferWindowPos
DrawMenuBar
EnumChildWindows
ExitWindowsEx
GetDlgItem
GetMenuItemCount
SetCapture
wsprintfA
DefDlgProcA
ole32
CoCreateInstance
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ