d:\uwr\vlexs
Static task
static1
Behavioral task
behavioral1
Sample
2432df6d5895700cd52ece76f01f36d8_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2432df6d5895700cd52ece76f01f36d8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2432df6d5895700cd52ece76f01f36d8_JaffaCakes118
-
Size
515KB
-
MD5
2432df6d5895700cd52ece76f01f36d8
-
SHA1
caffedb1ef274bce8962317d16c2eaec36a049a2
-
SHA256
88d216b4d2f666147282f23f79e3984e85a855825041db80671bd2a181f215cc
-
SHA512
7be2a01fc0c1e8310e31a83868ea46c4f8126677567811a28f496918677f2b95887ce3f1cc07e262140411b2a5eff9f26ad3b65da898471d012ad1e6c2ec3918
-
SSDEEP
12288:6W27UpwOqPA5MYBg8nEtpn+Fl4MvTs7diD:6HXOqPA59ail4oTIiD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2432df6d5895700cd52ece76f01f36d8_JaffaCakes118
Files
-
2432df6d5895700cd52ece76f01f36d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f7d3991963a8dad599ea7ece64e495d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLocalTime
GetStdHandle
GetEnvironmentStrings
HeapDestroy
SetHandleCount
HeapFree
GetModuleFileNameW
GetLastError
SetLastError
GetStringTypeW
SetConsoleCursorInfo
GetEnvironmentStringsW
SetConsoleTextAttribute
ExitProcess
CreateMutexA
DeleteFileA
lstrcmpiW
HeapAlloc
GetCurrentProcess
FreeLibrary
GetCommandLineA
MoveFileA
GetCurrentThreadId
GetModuleHandleA
TlsGetValue
GetTickCount
InterlockedIncrement
GetSystemTime
FreeEnvironmentStringsA
GetCurrentThread
GetCurrentProcessId
HeapReAlloc
InterlockedExchange
DeleteCriticalSection
RtlUnwind
VirtualFree
GetOEMCP
SetStdHandle
WriteFile
SetFilePointer
SetEnvironmentVariableA
VirtualQuery
TlsSetValue
GetSystemTimeAsFileTime
lstrlenA
InterlockedDecrement
CompareStringW
WideCharToMultiByte
GetModuleFileNameA
CloseHandle
GetProcAddress
TerminateProcess
TlsAlloc
HeapCreate
UnhandledExceptionFilter
GetACP
CompareStringA
GetStringTypeA
LoadLibraryA
LeaveCriticalSection
FreeEnvironmentStringsW
VirtualAlloc
InitializeCriticalSection
EnterCriticalSection
QueryPerformanceCounter
ReadFile
TlsFree
LCMapStringW
GetTimeZoneInformation
GetStartupInfoA
IsBadWritePtr
MultiByteToWideChar
OpenMutexA
LCMapStringA
GetVersion
FlushFileBuffers
GetFileType
GetCPInfo
comctl32
ImageList_DragShowNolock
InitCommonControlsEx
user32
GetWindowTextLengthA
MessageBoxW
RegisterClassA
MapVirtualKeyExW
SetWinEventHook
GetShellWindow
DdeDisconnectList
GetListBoxInfo
CreateDesktopA
RealGetWindowClass
CharToOemW
DefWindowProcW
DdeNameService
DdeGetData
IsWindowUnicode
CreateWindowExA
SetMenuItemBitmaps
ShowWindow
DestroyCaret
SetLastErrorEx
BeginPaint
GetWindow
GetMenuItemInfoA
RegisterClassExA
GetWindowInfo
RegisterDeviceNotificationW
Sections
.text Size: 334KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ