Static task
static1
Behavioral task
behavioral1
Sample
2c06baaabe1aa5f9ec379b4ecc11bdab_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2c06baaabe1aa5f9ec379b4ecc11bdab_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2c06baaabe1aa5f9ec379b4ecc11bdab_JaffaCakes118
-
Size
144KB
-
MD5
2c06baaabe1aa5f9ec379b4ecc11bdab
-
SHA1
8ced2d6e5befb1c6d9ac058c6ad2465f40ceac51
-
SHA256
9da0815b3a3c0a8f5a44eef1238f63c3bf2adc5af602913791c7cea5b53d0f91
-
SHA512
b23204fe01a68576e5794e57afedc41465d73284179243530cfed715a26c4f491de63969d343b508b50f2c4463a196ce3f896f74a208557c8598504244649fa8
-
SSDEEP
1536:WzlOzf6QyE8NpNWg0SWEG2YTY2pko6G+kReo/1AFj7GsoqFQMvhq203IUwRzTnz1:GO3M0pEGHD/eoUOIYpyvk7QX+tmd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c06baaabe1aa5f9ec379b4ecc11bdab_JaffaCakes118
Files
-
2c06baaabe1aa5f9ec379b4ecc11bdab_JaffaCakes118.exe windows:4 windows x86 arch:x86
6dcfc1b904bb6961ca3f96ebb0173ce2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnableWindow
GetWindowDC
LoadImageW
CharUpperW
GetWindowLongW
wsprintfW
wsprintfA
MessageBoxA
GetKeyState
SendMessageW
wvsprintfW
KillTimer
GetSystemMenu
EnableMenuItem
SetTimer
GetWindowTextW
DefWindowProcW
CallWindowProcW
SendMessageA
DrawIconEx
MessageBeep
SetWindowTextW
DialogBoxIndirectParamW
GetWindow
GetParent
GetClientRect
ClientToScreen
GetWindowTextLengthW
SetWindowPos
GetDC
DrawTextW
ReleaseDC
ShowWindow
GetWindowRect
ScreenToClient
LoadIconW
SetWindowLongW
SetDlgItemTextW
SystemParametersInfoW
GetSystemMetrics
GetDlgItem
SetFocus
EndDialog
shell32
SHGetPathFromIDListW
SHGetSpecialFolderPathW
ShellExecuteExW
SHBrowseForFolderW
SHGetFileInfoW
SHGetMalloc
ShellExecuteW
ole32
CoCreateInstance
CoInitialize
gdi32
SelectObject
GetDeviceCaps
GetObjectW
CreateFontIndirectW
DeleteObject
kernel32
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapSize
RaiseException
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetCPInfo
RtlUnwind
SetStdHandle
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
ExitProcess
GetTimeZoneInformation
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
HeapCreate
HeapDestroy
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
GetCurrentProcessId
GetModuleHandleW
FreeEnvironmentStringsW
UnhandledExceptionFilter
GlobalAlloc
SetLastError
VirtualFree
GetStartupInfoA
SetFileAttributesW
GetCommandLineW
SystemTimeToFileTime
GetLocalTime
GetExitCodeThread
WaitForSingleObject
GetModuleHandleA
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventW
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
SetEndOfFile
SetFileTime
ReadFile
SetFilePointer
GetFileSize
DeleteCriticalSection
FormatMessageW
lstrcpyW
LocalFree
SuspendThread
ResumeThread
TerminateThread
GetSystemDirectoryW
MulDiv
LoadLibraryA
GetProcAddress
GetDriveTypeW
CreateFileW
GetVersionExW
CreateThread
GetModuleFileNameW
lstrcmpiW
CloseHandle
SetCurrentDirectoryW
SetEnvironmentVariableW
GetTempPathW
GetUserDefaultLCID
GetUserDefaultUILanguage
GetOEMCP
GetACP
VirtualAlloc
DeleteFileW
FindNextFileW
RemoveDirectoryW
lstrlenW
GetSystemTimeAsFileTime
lstrcmpW
GetStdHandle
WriteFile
lstrlenA
ExpandEnvironmentStringsW
CreateDirectoryW
GetLastError
GetFileAttributesW
FindFirstFileW
FindClose
CompareFileTime
WideCharToMultiByte
MultiByteToWideChar
Sleep
HeapReAlloc
HeapAlloc
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
TerminateProcess
Sections
.text Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ