Static task
static1
Behavioral task
behavioral1
Sample
2627aa4206cdf0415422546dd9b82246_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2627aa4206cdf0415422546dd9b82246_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2627aa4206cdf0415422546dd9b82246_JaffaCakes118
-
Size
610KB
-
MD5
2627aa4206cdf0415422546dd9b82246
-
SHA1
2260f8b912417b44ad55373dd6c161727667d01b
-
SHA256
110fbb280156593fb093c20d743008f4896d8ea225ab0ce9bc7d4913524ef9fb
-
SHA512
f4f7fe2ca8acb2ea95f4bd2d7f71a0bf3d6947a2a52def1f1b07f78978c31db523fbaff3296bf35b01afab319ef77713f7a2f817119042041e9aed40709722bb
-
SSDEEP
12288:tYzmarTKYuZ0y2haqDDO19Role/PnROGaBxO0fYTqMkMi8:tYdKYI2YqDDO19RoftPOPQW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2627aa4206cdf0415422546dd9b82246_JaffaCakes118
Files
-
2627aa4206cdf0415422546dd9b82246_JaffaCakes118.exe windows:4 windows x86 arch:x86
a9303ed7871370f04fa810094fb352a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UnregisterDeviceNotification
HideCaret
ScrollWindow
LoadBitmapA
InSendMessageEx
OemKeyScan
DdeGetLastError
CharLowerBuffA
DeferWindowPos
RegisterClassExA
MessageBoxA
MessageBeep
IsCharUpperA
DefMDIChildProcA
GetTabbedTextExtentW
RegisterClassA
ShowWindow
DdeInitializeW
ChangeDisplaySettingsA
GetWindowThreadProcessId
DrawFrameControl
GetMenuContextHelpId
GetWindowWord
LoadKeyboardLayoutA
comctl32
InitCommonControlsEx
kernel32
ExitProcess
CompareStringA
WideCharToMultiByte
GetModuleHandleA
GetCurrentProcess
GetModuleFileNameW
InterlockedIncrement
GetFileType
HeapCreate
IsValidLocale
VirtualFree
GetModuleFileNameA
DebugBreak
InterlockedDecrement
GetACP
FreeEnvironmentStringsA
TlsAlloc
GetPrivateProfileStringW
CompareStringW
GetStringTypeA
ReadFile
GetCPInfo
GetLocaleInfoA
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetSystemTimeAsFileTime
SetLocaleInfoA
HeapAlloc
WriteProfileStringW
GetOEMCP
CloseHandle
HeapDestroy
GetTimeFormatA
TerminateProcess
GetProfileIntW
QueryPerformanceCounter
GetUserDefaultLCID
GetProcAddress
SuspendThread
OpenFileMappingW
VirtualQuery
GetCurrentThreadId
LCMapStringW
LCMapStringA
EnterCriticalSection
SetLastError
VirtualProtect
GetCommandLineW
InterlockedExchange
IsValidCodePage
IsBadWritePtr
HeapValidate
GetDateFormatA
FreeEnvironmentStringsW
MultiByteToWideChar
SetConsoleCtrlHandler
GetSystemInfo
SetFilePointer
GetTimeZoneInformation
GetLastError
GetEnvironmentStringsW
GetStartupInfoW
LoadLibraryA
SetEnvironmentVariableA
GetEnvironmentStrings
GetStringTypeW
GetCurrentThread
EnumSystemLocalesA
VirtualAlloc
GetVersionExA
GetTickCount
RtlUnwind
GetStartupInfoA
OpenMutexA
SetStdHandle
SetHandleCount
InitializeCriticalSection
HeapReAlloc
GetEnvironmentVariableW
FlushFileBuffers
CreateMutexA
IsBadReadPtr
OutputDebugStringA
TlsFree
HeapFree
GetCommandLineA
GetVolumeInformationW
TlsSetValue
GetFullPathNameA
TlsGetValue
GetLocaleInfoW
WriteFile
UnhandledExceptionFilter
Sections
.text Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ