Static task
static1
Behavioral task
behavioral1
Sample
2d339ad537daf373b6baf32684563af2_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2d339ad537daf373b6baf32684563af2_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
2d339ad537daf373b6baf32684563af2_JaffaCakes118
-
Size
2.3MB
-
MD5
2d339ad537daf373b6baf32684563af2
-
SHA1
cd8b4742f1b9245c0059a2cfdebf5ca4e7452995
-
SHA256
cf9707a9274edb5528a03701466194e8d7fe48502d1235b1482fe215ef15fc95
-
SHA512
1504f3517099c8974484c66b8d1ab32a0b42ae34cba955d0bd5367f31a0ebba063d271cc851dab9167c43828a1f9e0cd521052825944db9a1e2f58e0be2bfb3d
-
SSDEEP
24576:7CbJLZF57rj5kayz1phUpxx7OseVYSBV4qbNGnHlv:7CTAphOStWSBPb0Fv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d339ad537daf373b6baf32684563af2_JaffaCakes118
Files
-
2d339ad537daf373b6baf32684563af2_JaffaCakes118.exe windows:5 windows x86 arch:x86
5713f87657f880eb6bcb41642f5a6158
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyExW
user32
TranslateMDISysAccel
SetScrollInfo
IsDialogMessageW
DestroyIcon
GetClassNameW
PtInRect
GetCursorPos
GetScrollRange
GetWindowRgnBox
GetDCEx
GetDC
SetMenuDefaultItem
CreatePopupMenu
GetSystemMenu
DrawMenuBar
LoadMenuW
ReleaseCapture
GetDialogBaseUnits
CheckDlgButton
GetDlgItemInt
GetDlgItem
IsIconic
DestroyWindow
CreateWindowExW
DispatchMessageW
GetKeyboardLayoutList
MapDialogRect
crypt32
CryptStringToBinaryW
CertFreeCertificateChain
CertGetNameStringW
CertNameToStrW
CryptExportPublicKeyInfo
CertVerifyTimeValidity
CertAddEncodedCertificateToStore
CertFreeCRLContext
CertOpenStore
CryptFindOIDInfo
CryptDecodeObject
CryptDecodeObjectEx
oleaut32
SysReAllocStringLen
CreateErrorInfo
SetErrorInfo
RegisterTypeLi
LoadTypeLi
VarBoolFromStr
VarBstrFromBool
VarCyFromStr
VarI4FromStr
VariantCopyInd
VariantInit
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayRedim
SafeArrayCreate
SysStringLen
SysAllocStringLen
psapi
GetMappedFileNameW
kernel32
HeapSize
HeapReAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
GetACP
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
IsDebuggerPresent
IsProcessorFeaturePresent
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetStartupInfoW
DeleteCriticalSection
GetFileType
GlobalFree
VirtualAlloc
HeapAlloc
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsSystemResumeAutomatic
SetHandleCount
FlushFileBuffers
SetFilePointer
TransmitCommChar
GetSystemTimeAdjustment
SetMailslotInfo
lstrcmpiW
TlsFree
GetModuleHandleW
FindResourceW
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
CreateFileW
IsValidCodePage
CompareStringW
GetUserDefaultLangID
GetConsoleWindow
GetCommandLineW
RaiseException
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
Sections
.text Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 609KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.9onv Size: 598KB - Virtual size: 598KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r9235 Size: 419KB - Virtual size: 419KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hm1ms Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5t44s Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ