NvOptimusEnablementCuda
Static task
static1
Behavioral task
behavioral1
Sample
2c67fa1be5da1081bc9d28a91f31f254_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2c67fa1be5da1081bc9d28a91f31f254_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2c67fa1be5da1081bc9d28a91f31f254_JaffaCakes118
-
Size
1.9MB
-
MD5
2c67fa1be5da1081bc9d28a91f31f254
-
SHA1
094b7837edbba2cc35088984ab5a5e2938a7087c
-
SHA256
7548a0a14a0f6500d51dbce175b62f7ea87c93d7a98276887fe4fbc550bd5c90
-
SHA512
ed24c47280abcf8454f30ec1299c772e509126ec97bad091b24c000755dd2b4211b0c50d3a3f540b1121703147ca17256b801d00a50cab0776f3ffcaf2663c70
-
SSDEEP
24576:I98k/m/KEX/u7Ie/6INpEzeGBF+Pmgj1BtArV8+/i6xQe/pDHTnM48ouEqFQyG+1:Ic/vF+J1B4HvpUKu9FQyBB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c67fa1be5da1081bc9d28a91f31f254_JaffaCakes118
Files
-
2c67fa1be5da1081bc9d28a91f31f254_JaffaCakes118.exe windows:5 windows x86 arch:x86
81fba9220e77cd9eaee260434a1b8e85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetLastError
Sleep
CloseHandle
GetSystemTimeAsFileTime
GetSystemInfo
LoadLibraryA
LoadLibraryW
GetModuleFileNameW
GetVolumeInformationA
CreateMutexW
CreateToolhelp32Snapshot
LocalFree
GetFileSize
WriteFile
ReadFile
SetFilePointer
CreateEventW
GetSystemDirectoryW
CreateFileW
DeleteFileW
GetComputerNameW
ReleaseMutex
WaitForSingleObject
SetCurrentDirectoryW
GetCurrentDirectoryW
LockResource
CreateThread
GetCurrentThreadId
SetEvent
ResetEvent
LoadResource
SizeofResource
FindClose
GetTickCount
FindResourceW
CreateDirectoryW
GetFileAttributesW
FindFirstFileW
FindNextFileW
GetVersionExW
MultiByteToWideChar
Process32FirstW
Process32NextW
InterlockedCompareExchange
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FlushFileBuffers
CreateFileA
FormatMessageW
SetEndOfFile
GetCurrentProcess
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenProcess
FreeLibrary
GetCurrentProcessId
TerminateProcess
GetCurrentThread
SetLastError
GlobalSize
GlobalLock
GlobalUnlock
GetExitCodeProcess
ExitThread
CreateProcessA
DeleteFileA
FormatMessageA
OpenMutexW
GetLocaleInfoW
LockFile
UnlockFile
LockFileEx
UnlockFileEx
GetSystemTime
GetTempPathA
GetTempPathW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFullPathNameA
GetFullPathNameW
GetFileAttributesA
GetFileAttributesExW
AreFileApisANSI
QueryPerformanceCounter
WideCharToMultiByte
IsWow64Process
LocalAlloc
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
GetProcAddress
SetFilePointerEx
lstrlenW
GetStringTypeW
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetModuleHandleExW
HeapFree
HeapAlloc
GetCPInfo
HeapReAlloc
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
IsDebuggerPresent
LoadLibraryExW
GetCommandLineW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
IsProcessorFeaturePresent
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetStdHandle
GetProcessHeap
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetFileType
MoveFileExW
ReadConsoleW
RemoveDirectoryW
FindFirstFileExW
SetStdHandle
GetDriveTypeW
VirtualQuery
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
WriteConsoleW
SetEnvironmentVariableA
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
TryEnterCriticalSection
SwitchToThread
ole32
CreateStreamOnHGlobal
CLSIDFromString
GetHGlobalFromStream
gdiplus
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdiplusStartup
GdipAlloc
GdipCloneImage
GdipSaveImageToStream
GdipFree
Exports
Exports
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relocz Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 681KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ