Static task
static1
Behavioral task
behavioral1
Sample
2536b081d0c554d072fb70f1e5ba7227_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2536b081d0c554d072fb70f1e5ba7227_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
2536b081d0c554d072fb70f1e5ba7227_JaffaCakes118
-
Size
1.9MB
-
MD5
2536b081d0c554d072fb70f1e5ba7227
-
SHA1
55c44e5c85dd2b0fa506d5beabdd78155ece81f7
-
SHA256
8f6aae5dac6a4194fd3a02df46b364038f24d1ea27db13caa76eb6274f489253
-
SHA512
21beef556c7eb72b8e53cb580fba2168ed0a5b1f65ca71b360ed7fafc8a358834209922f9bc4d830d14feea2345801318fbd51072db329e9f975f4e84b9edd7c
-
SSDEEP
24576:TD1nVQ3PEfBnTyqX8bxZqnjISI+xAno42rV:His+1eHOno42rV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2536b081d0c554d072fb70f1e5ba7227_JaffaCakes118
Files
-
2536b081d0c554d072fb70f1e5ba7227_JaffaCakes118.exe windows:5 windows x86 arch:x86
810faec429c6cb693319fbdd97a77a2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
winspool.drv
GetPrintProcessorDirectoryW
DeletePrinterConnectionW
GetSpoolFileHandle
kernel32
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GlobalFree
VirtualAlloc
HeapSize
GetCurrentProcessId
InitializeCriticalSection
SystemTimeToFileTime
FileTimeToLocalFileTime
TlsAlloc
CreateFileMappingW
CreateFileW
IsValidCodePage
GetUserDefaultLCID
GetStringTypeW
EnumSystemLanguageGroupsW
GetConsoleWindow
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapReAlloc
HeapAlloc
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
GetACP
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetStartupInfoW
CloseHandle
GetCommandLineW
RaiseException
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
wtsapi32
WTSEnumerateSessionsW
WTSQuerySessionInformationW
opengl32
glTexParameteri
glColorMask
glCopyTexImage2D
glDeleteTextures
glDepthFunc
glDepthMask
glDisable
glDrawElements
glFlush
glGetFloatv
glGetString
glIsEnabled
glPixelStorei
glReadPixels
glStencilFunc
glStencilOp
glClear
user32
SetDlgItemTextW
GetDlgItemInt
EndDeferWindowPos
GetDlgItemTextW
DestroyWindow
GetKeyboardLayoutList
GetClipboardViewer
DdeReconnect
GetActiveWindow
GetMenuState
DestroyMenu
GetMenuItemCount
TrackPopupMenuEx
ReleaseDC
FillRect
CopyRect
IsRectEmpty
PtInRect
SetWindowLongW
GetLastActivePopup
LoadCursorW
LoadIconW
DestroyIcon
ShowWindow
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 838KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.44ze0m Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4h17 Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.euk4 Size: 658KB - Virtual size: 658KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ