Static task
static1
Behavioral task
behavioral1
Sample
2133553e17dd484af88eac3f9fd377df_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2133553e17dd484af88eac3f9fd377df_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2133553e17dd484af88eac3f9fd377df_JaffaCakes118
-
Size
512KB
-
MD5
2133553e17dd484af88eac3f9fd377df
-
SHA1
d5bf9f19029aba19c98fc6e3634bae5f336b1d58
-
SHA256
4835589b6318e5346620f393502c7de72304604780592d1d4ea3a3f565775fe0
-
SHA512
648057b42f933356fa97148ca087c9e97d355e98532e60998b88053259b2a4a58aed52584fb903d94c37e9a28858ec1df812beffda8e904cde6d1e8bdd24fe22
-
SSDEEP
12288:tzWHQyaYfTVmG8rXc4gcGVaXAFD7twghX:tCwaTXiGgXA9twi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2133553e17dd484af88eac3f9fd377df_JaffaCakes118
Files
-
2133553e17dd484af88eac3f9fd377df_JaffaCakes118.exe windows:4 windows x86 arch:x86
1e3ea14f38e7eea361d30eea66e42906
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
UnmapViewOfFile
SizeofResource
GetCurrentThreadId
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCommandLineW
SetFileTime
LockResource
GetCurrentProcessId
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
GetConsoleCP
GlobalFree
GetSystemInfo
HeapCreate
LCMapStringW
GetLastError
LeaveCriticalSection
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
GetTimeZoneInformation
RemoveDirectoryA
GlobalLock
WaitForMultipleObjects
FindNextFileA
CreateFileMappingA
CompareStringA
FindFirstFileA
CompareStringW
WriteFile
GetProcessHeap
GetProcAddress
SetEvent
GetWindowsDirectoryA
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
VirtualProtect
TlsAlloc
GetTickCount
QueryPerformanceCounter
VirtualFree
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
GetVersion
SetEndOfFile
CreateEventW
VirtualQuery
WriteConsoleA
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
MulDiv
CreateThread
GetModuleHandleA
CreateMutexA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
GetExitCodeProcess
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
FreeEnvironmentStringsW
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
WaitForSingleObject
GetFileAttributesA
GetConsoleOutputCP
GetStdHandle
GetCurrentThread
GetSystemDefaultLangID
GetUserDefaultLCID
GetModuleHandleW
GetUserDefaultLangID
GetSystemDefaultLCID
Sleep
SetConsoleCtrlHandler
VirtualAlloc
FreeLibrary
GetOEMCP
advapi32
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
user32
GetSystemMetrics
PostQuitMessage
SetWindowPos
IsWindow
CallWindowProcA
wsprintfA
InvalidateRect
SystemParametersInfoA
GetSysColor
MessageBoxA
SetDlgItemTextA
GetDesktopWindow
SendMessageA
LoadIconA
ScreenToClient
GetDlgItem
SetWindowTextA
EndDialog
SetWindowLongA
ReleaseCapture
PostMessageA
GetWindowRect
MapWindowPoints
DispatchMessageA
SetTimer
GetWindowLongA
EnableMenuItem
SetForegroundWindow
EnableWindow
ShowWindow
DefWindowProcA
GetParent
GetMessageA
DestroyWindow
GetClientRect
ReleaseDC
GetCursorPos
GetDC
PeekMessageA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 352KB - Virtual size: 351KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ