Static task
static1
Behavioral task
behavioral1
Sample
2a0ec64797abdf2522f349de45778a6d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a0ec64797abdf2522f349de45778a6d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a0ec64797abdf2522f349de45778a6d_JaffaCakes118
-
Size
520KB
-
MD5
2a0ec64797abdf2522f349de45778a6d
-
SHA1
4adef1669417d8d30c4a2a56b9593d9b6e6f7599
-
SHA256
c3631adc8f0c59263555dc68a814e7aa5744b4eefdeed438e0e284b5d93ddda3
-
SHA512
8a1c94c9f51a4a84d7a234cc17bac2c5cb1f340bae5e0bf20654280cc6bb400ef9e15bbec037cfc4fd950c8a1447bdff19405002c4cd932c8ea34565e315a235
-
SSDEEP
12288:updWt9ZCP/EPYcR4ejoQUcy4kX6ztx9755pSE:updWt9ZCP/EPbR4ejBrztx975bS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a0ec64797abdf2522f349de45778a6d_JaffaCakes118
Files
-
2a0ec64797abdf2522f349de45778a6d_JaffaCakes118.exe windows:5 windows x86 arch:x86
e63b7405e526b785e37a19782db9510f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
MapViewOfFile
RaiseException
GetCommandLineA
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
SizeofResource
CreateProcessW
lstrlenW
VirtualQuery
LCMapStringA
GetConsoleCP
lstrlenA
UnmapViewOfFile
LCMapStringW
GetLastError
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
FindFirstFileW
CompareStringA
FindFirstFileA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
VirtualProtect
GetTickCount
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
EnterCriticalSection
HeapFree
InterlockedIncrement
GetVersion
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
MulDiv
SetUnhandledExceptionFilter
CreateThread
ReadFile
CreateMutexA
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
TlsGetValue
SetLastError
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
SetEvent
SetFileAttributesA
GetStringTypeW
HeapReAlloc
SetStdHandle
WriteFile
GetSystemTimeAsFileTime
GetStringTypeA
lstrcmpiA
WideCharToMultiByte
GetTempPathA
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
HeapDestroy
FindNextFileA
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetStdHandle
HeapAlloc
GetEnvironmentStringsW
SetHandleCount
TlsAlloc
GetEnvironmentVariableA
RtlUnwind
CloseHandle
lstrcpynA
GetACP
GetModuleHandleW
GetCurrentThreadId
InterlockedExchange
GetEnvironmentStrings
HeapCreate
VirtualFree
Sleep
FindResourceA
VirtualAlloc
SetFilePointer
GetOEMCP
advapi32
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
user32
ScreenToClient
EndDialog
LoadIconA
LoadCursorA
ClientToScreen
GetDlgItem
GetWindowRect
GetSystemMetrics
KillTimer
MapWindowPoints
GetSubMenu
LoadStringA
GetWindow
TranslateMessage
PeekMessageA
EnableWindow
ShowWindow
UpdateWindow
DestroyWindow
MsgWaitForMultipleObjects
SendMessageA
UnregisterClassA
ReleaseDC
GetDC
SetWindowPos
PostQuitMessage
SetForegroundWindow
MessageBoxA
DialogBoxParamA
GetSysColor
InvalidateRect
GetClientRect
SetDlgItemTextA
gdi32
GetDeviceCaps
DeleteDC
SetTextColor
DeleteObject
CreateCompatibleDC
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 488KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ