Static task
static1
Behavioral task
behavioral1
Sample
2584e7ee0523ead29930cfb6836386b4_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2584e7ee0523ead29930cfb6836386b4_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2584e7ee0523ead29930cfb6836386b4_JaffaCakes118
-
Size
368KB
-
MD5
2584e7ee0523ead29930cfb6836386b4
-
SHA1
3f7ac3dcbee17fb2480c3a14256618089ed968b5
-
SHA256
f699bda3eaff727f8516ff126d2aa0b7c6df2ee5da9fb0e6678d579e5060354f
-
SHA512
c087cc39d6708364995782d56939a08679fceb1186443cf6785e2f3569c7dd59db00b7c5ae6149fec0dee50ffbc3fe991aebf785535c5d87c471af34827a2bbd
-
SSDEEP
6144:wx+A20/VKDfwmFAZCiC4cOFqkiEuSP9o3T5kHh02i+wntYjFA:NA2KVefwmusIqkiV49E5kBH9wnw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2584e7ee0523ead29930cfb6836386b4_JaffaCakes118
Files
-
2584e7ee0523ead29930cfb6836386b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
818666156ca4f447c0c25d0ee8ce758b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
ole32
CoInitialize
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
gdi32
BitBlt
SetBkColor
GetDeviceCaps
DeleteObject
DeleteDC
kernel32
VirtualAlloc
Sleep
VirtualFree
WriteFile
HeapCreate
CreateProcessA
InterlockedExchange
GetVersion
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
RemoveDirectoryA
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
FindResourceW
GetConsoleCP
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
GetLastError
LeaveCriticalSection
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
WaitForMultipleObjects
DuplicateHandle
CompareStringA
GlobalFree
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
SetEvent
SetErrorMode
DeleteFileA
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
CreateMutexA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
FormatMessageW
LocalFree
GetOEMCP
SetFileAttributesA
GetStringTypeW
HeapReAlloc
SizeofResource
GetSystemTimeAsFileTime
GetStringTypeA
GetCPInfo
GetTempPathA
FreeEnvironmentStringsW
LoadLibraryExW
ExpandEnvironmentStringsA
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
lstrlenW
GetConsoleOutputCP
GetStdHandle
RtlUnwind
oleaut32
VariantInit
SysStringLen
VariantClear
user32
IsWindow
PostQuitMessage
MoveWindow
SetForegroundWindow
BeginPaint
SetCursor
SystemParametersInfoA
GetSysColor
MessageBoxA
MessageBeep
GetFocus
GetDesktopWindow
TrackPopupMenu
LoadCursorA
ScreenToClient
SetTimer
GetSubMenu
SetWindowTextA
EndDialog
SetWindowLongA
GetWindowRect
GetSystemMetrics
DefWindowProcA
PeekMessageA
SetFocus
EndPaint
CreateWindowExA
GetWindowLongA
RegisterClassA
EnableMenuItem
GetWindow
IsWindowEnabled
TranslateMessage
SetWindowPos
EnableWindow
ShowWindow
GetParent
GetMessageA
DestroyWindow
GetClientRect
SendMessageA
ReleaseDC
GetCursorPos
GetDC
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 332KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ