Static task
static1
Behavioral task
behavioral1
Sample
b2d3ec1401d1b61414e5cf75bdc8a6d8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b2d3ec1401d1b61414e5cf75bdc8a6d8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
b2d3ec1401d1b61414e5cf75bdc8a6d8_JaffaCakes118
-
Size
1.8MB
-
MD5
b2d3ec1401d1b61414e5cf75bdc8a6d8
-
SHA1
b925a436ff6c3b6ba097cc420a4e14213f3303e2
-
SHA256
ebdb1d84019e226fcee202ef6d66be56d6c79fd612a85cd23f1308913972164c
-
SHA512
feba82a37e7a71e33bd663c5a7328f9f32103fa427edb2cbec47089deb9031a4ff94b00073b29321deae29873a565b0e154469ad41fb02fcc05fae191cdaca8e
-
SSDEEP
24576:NCncsEltxIpN3exbKOEtRHxwK77Dinn1e00H:NxNtxAeNK1vzGeB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2d3ec1401d1b61414e5cf75bdc8a6d8_JaffaCakes118
Files
-
b2d3ec1401d1b61414e5cf75bdc8a6d8_JaffaCakes118.exe windows:5 windows x86 arch:x86
bdcd996cb46b58403cd7d0a2b5e95027
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExW
RegEnumValueW
winspool.drv
EnumMonitorsW
kernel32
CreateFileW
CloseHandle
GetVersion
GlobalLock
VirtualAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
ReleaseMutex
GetFileSize
WaitCommEvent
GetSystemTime
GetSystemTimeAsFileTime
GetLocalTime
FileTimeToSystemTime
lstrcmpW
TlsFree
CreateFileMappingW
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
ExpandEnvironmentStringsW
GetTempPathW
GetFileAttributesW
FindFirstFileW
BuildCommDCBW
VerifyVersionInfoW
OpenJobObjectW
GetThreadLocale
GetConsoleWindow
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapFree
LoadLibraryExW
RtlUnwind
OutputDebugStringW
GetStringTypeW
HeapAlloc
HeapReAlloc
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
user32
DestroyCursor
LoadCursorW
GetSysColorBrush
ClientToScreen
HideCaret
MessageBeep
SetScrollRange
RemoveMenu
InsertMenuW
GetMenuItemID
SetMenu
GetMenu
KillTimer
ReleaseCapture
CheckDlgButton
GetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
DialogBoxParamW
DestroyWindow
SendMessageW
GetMessagePos
PeekMessageW
RegisterWindowMessageW
MapDialogRect
rasapi32
RasGetEntryPropertiesW
setupapi
CM_Get_Parent
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiCallClassInstaller
SetupDiGetClassDevsExW
SetupDiGetSelectedDriverW
SetupDiEnumDriverInfoW
CM_Locate_DevNodeW
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInfoListDetailW
SetupDiCreateDeviceInfoListExW
SetupCloseFileQueue
SetupGetStringFieldW
SetupGetFieldCount
SetupGetLineCountW
SetupFindFirstLineW
SetupOpenInfFileW
SetupDiBuildDriverInfoList
SetupDiGetActualSectionToInstallW
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 851KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edddl Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yo15 Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.areso Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ