Static task
static1
Behavioral task
behavioral1
Sample
2d3f1588b94873580b45dad48f18bc45_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2d3f1588b94873580b45dad48f18bc45_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
2d3f1588b94873580b45dad48f18bc45_JaffaCakes118
-
Size
2.0MB
-
MD5
2d3f1588b94873580b45dad48f18bc45
-
SHA1
4b84989190666d17d3afd86ba771729f352d17af
-
SHA256
77d0e9290a47df3dd9142326541f5bb02b05a72db08136169d1e3a25214c88af
-
SHA512
0eb4d6d2dae2e9650fb5838fc54115566b90b974ffaa87d4345208a5204a69c70cb6d56bcabf905995c66ccc27219db81aed467b1bd12e0d8253fbf3916785ae
-
SSDEEP
24576:QqzH3l6jXQT/yAIir26vSnv4l6pXKaLoYCgWgTyrvZKPCd0/OvHWIOG:Qqb3UjY/Ba8SRXK9oW0G/1OG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d3f1588b94873580b45dad48f18bc45_JaffaCakes118
Files
-
2d3f1588b94873580b45dad48f18bc45_JaffaCakes118.exe windows:5 windows x86 arch:x86
011a8e6d8ef33b2184af8d2cc1c2eca1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
SetEndOfFile
SetCommState
SystemTimeToFileTime
lstrcmpW
GetModuleHandleW
GetCommandLineW
GetDriveTypeW
CreateDirectoryW
GetFileAttributesW
FindNextFileW
GetLocaleInfoW
GetConsoleWindow
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
RtlUnwind
OutputDebugStringW
GetStringTypeW
HeapAlloc
HeapReAlloc
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
FreeEnvironmentStringsW
HeapFree
Sleep
VirtualAlloc
user32
DefWindowProcW
GetClassInfoW
DestroyWindow
CloseWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItemTextW
CharNextW
SetCapture
KillTimer
LoadAcceleratorsW
LoadMenuW
GetMenuState
GetMenuItemCount
TrackPopupMenu
SetMenuItemInfoW
GetDC
GetWindowDC
EnableScrollBar
SetMenuContextHelpId
GetCursor
GetSysColor
FrameRect
InflateRect
IntersectRect
GetWindowLongW
GetParent
GetClassNameW
SystemParametersInfoW
MonitorFromWindow
GetMonitorInfoW
ImpersonateDdeClientWindow
DdeConnectList
GetKeyboardLayout
DrawCaption
GetMessageTime
SendMessageW
userenv
EnterCriticalPolicySection
LoadUserProfileW
LeaveCriticalPolicySection
advapi32
RegEnumKeyExW
OpenSCManagerW
RegCloseKey
Sections
.text Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 825KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.h9eg7o Size: 239KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.9d7i0 Size: 547KB - Virtual size: 547KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wi0not Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ