Static task
static1
Behavioral task
behavioral1
Sample
2720d8732ecee56c305b2ffe1f5929a1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2720d8732ecee56c305b2ffe1f5929a1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2720d8732ecee56c305b2ffe1f5929a1_JaffaCakes118
-
Size
564KB
-
MD5
2720d8732ecee56c305b2ffe1f5929a1
-
SHA1
5aa303205618999b351af712f474999a06f7118f
-
SHA256
d12b516c648c4ea78fa17e3d1777081da8a531d4d775317897d0446a41ab74a0
-
SHA512
3727da1793a3b5156f29be73716953076e3363813b457fda2df9f2ead6ecddc0dbbc2852f1551b5a47d9ddbc6a9611fc7e7ccb54b7f7650a4b630aff958c6ae4
-
SSDEEP
6144:jwLZ5wtZ+tMrqYQLx0SsCtlwFEk/aQQsFgTh2GCf/xGzcymbMo/EfgISi9366irh:jJtwmrgcCrwFWsFgThSYzc7Yo/E3c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2720d8732ecee56c305b2ffe1f5929a1_JaffaCakes118
Files
-
2720d8732ecee56c305b2ffe1f5929a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
6952e3c20aef079f9358287795da1431
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_BeginDrag
InitCommonControlsEx
ImageList_LoadImageA
ImageList_GetDragImage
ImageList_SetDragCursorImage
DrawStatusTextA
ImageList_SetOverlayImage
ImageList_Duplicate
CreateStatusWindowW
user32
DeferWindowPos
EnumDesktopsA
DlgDirListComboBoxA
UnregisterDeviceNotification
HideCaret
SystemParametersInfoW
SendIMEMessageExW
RegisterWindowMessageA
UnhookWindowsHookEx
DdeInitializeW
InSendMessageEx
IsCharUpperA
KillTimer
CreateDesktopW
MessageBoxW
SetMenuItemInfoW
RealGetWindowClass
WINNLSEnableIME
ToAsciiEx
MonitorFromRect
RegisterClassA
IsIconic
DefWindowProcW
GetUserObjectInformationA
ShowWindow
EnumChildWindows
GetMenuItemCount
CreateWindowExA
EnumPropsExW
DrawTextA
SetRect
SetLastErrorEx
MessageBoxExA
GetCapture
GetClipboardData
DdeAddData
GetClipboardFormatNameA
CharNextExA
ArrangeIconicWindows
CountClipboardFormats
GetFocus
GetAncestor
SetMessageQueue
EnumPropsExA
RegisterClassW
DestroyWindow
DefFrameProcW
MsgWaitForMultipleObjectsEx
RegisterClassExA
gdi32
FillPath
StartPage
CreateDCA
GetTextCharsetInfo
SetWindowExtEx
AddFontResourceA
DeleteObject
SetDIBits
GetObjectW
EndPage
SaveDC
GetDeviceCaps
DeleteDC
DrawEscape
EnumFontFamiliesW
Pie
EnumMetaFile
WidenPath
SetMiterLimit
GetCurrentPositionEx
CreateMetaFileA
kernel32
LeaveCriticalSection
TlsSetValue
CompareStringW
OpenWaitableTimerW
SetLastError
HeapFree
CloseHandle
EnterCriticalSection
FreeLibrary
GetCurrentThreadId
GetTimeZoneInformation
GetCPInfo
GlobalFindAtomA
GetConsoleOutputCP
SetCurrentDirectoryA
FreeEnvironmentStringsW
LCMapStringA
CreateDirectoryExA
WriteFile
MultiByteToWideChar
GetLocaleInfoW
InterlockedDecrement
UnhandledExceptionFilter
GetTimeFormatA
FormatMessageW
IsValidCodePage
GetThreadContext
CreateEventW
GetConsoleCP
TlsAlloc
GetLocaleInfoA
VirtualFree
GlobalAlloc
GetModuleHandleA
WideCharToMultiByte
CreateProcessW
SetFilePointer
SetUnhandledExceptionFilter
VirtualAlloc
CreateMutexA
MoveFileW
GetProcAddress
HeapDestroy
LoadLibraryA
GetEnvironmentStringsW
TlsGetValue
TlsFree
CopyFileA
LCMapStringW
GetMailslotInfo
GetOEMCP
HeapCreate
EnumSystemLocalesA
HeapAlloc
ReadConsoleOutputAttribute
SetStdHandle
GetPrivateProfileStructW
GetVersionExA
GetUserDefaultLCID
GetCurrentThread
SetEnvironmentVariableA
GetStartupInfoW
FlushInstructionCache
WriteConsoleW
RtlUnwind
FreeEnvironmentStringsA
OpenMutexA
HeapSize
GetConsoleMode
SetConsoleTextAttribute
EnumResourceLanguagesA
GetStdHandle
QueryPerformanceCounter
VirtualQuery
GetPrivateProfileSectionNamesW
GetStartupInfoA
GetFileType
IsValidLocale
SetConsoleCtrlHandler
InitializeCriticalSection
GetProcessHeap
GetSystemTimeAsFileTime
CompareStringA
GetCurrentProcessId
FlushFileBuffers
GetModuleFileNameA
Sleep
IsDebuggerPresent
GetCurrentProcess
GetProfileStringW
GetACP
GetDateFormatA
GetThreadTimes
SetHandleCount
LocalHandle
TerminateProcess
ExitProcess
GetStringTypeW
CreateFileA
GetCommandLineA
GetStringTypeA
InterlockedExchange
ReadFile
GetTickCount
GetNamedPipeHandleStateW
DeleteCriticalSection
HeapReAlloc
InterlockedIncrement
GetEnvironmentStrings
GetLastError
WriteConsoleA
GetDiskFreeSpaceExA
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ