Static task
static1
Behavioral task
behavioral1
Sample
2a123751591414c33c5702e199eb86b1_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2a123751591414c33c5702e199eb86b1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a123751591414c33c5702e199eb86b1_JaffaCakes118
-
Size
554KB
-
MD5
2a123751591414c33c5702e199eb86b1
-
SHA1
190c35dc80ac41c6a2d95c2e42e9420feb0d8b96
-
SHA256
dc9281a4553fed1ad6985cb8efe178cc548e902a20a222592f3e79c177146251
-
SHA512
056f18bb1b0741bad74c9d37458c10781ab7abc239fb052e27ca575ddffeca33342db4f6ecb091ea28dc60eab646a6a57268e2379def5601981693da0b68b924
-
SSDEEP
12288:hLhGvaf+bmkUrAZKs672quoMVZyEn55f0JMDkQNjS:h9fYmkQAdbqTLEhDm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a123751591414c33c5702e199eb86b1_JaffaCakes118
Files
-
2a123751591414c33c5702e199eb86b1_JaffaCakes118.exe windows:5 windows x86 arch:x86
ac947f4ec6f055ed8521a6092b08ef9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoA
kernel32
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
WritePrivateProfileStringA
SizeofResource
FileTimeToLocalFileTime
CreateProcessW
GetModuleFileNameA
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
HeapCreate
LCMapStringW
GetLastError
LeaveCriticalSection
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GetProcAddress
WaitForMultipleObjects
DuplicateHandle
FindFirstFileW
CreateFileMappingA
ResetEvent
CompareStringA
lstrcpyA
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GlobalLock
GetFullPathNameA
SetErrorMode
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
GetVersionExW
VirtualProtect
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
CloseHandle
InterlockedIncrement
GetVersion
SetEndOfFile
CreateEventW
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
CreateMutexA
GetLocalTime
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
GetPrivateProfileStringA
RemoveDirectoryA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
lstrlenW
GetEnvironmentVariableA
SetLastError
OutputDebugStringA
FormatMessageA
TlsGetValue
FindClose
GetModuleHandleW
LoadResource
InitializeCriticalSection
GetExitCodeProcess
lstrcpynA
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
InterlockedExchange
GetStringTypeA
lstrcmpiA
GetCPInfo
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
LoadLibraryExW
lstrcatA
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindNextFileA
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
RtlUnwind
GetACP
GetCurrentThreadId
GetEnvironmentStrings
CreateProcessA
IsValidCodePage
UnmapViewOfFile
WriteFile
VirtualFree
Sleep
FindResourceA
VirtualAlloc
DeleteFileW
GetOEMCP
SetCurrentDirectoryA
FormatMessageW
ole32
OleUninitialize
OleInitialize
advapi32
RegCloseKey
RegDeleteKeyA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegSetValueExA
user32
SendMessageA
LoadIconA
LoadCursorA
ScreenToClient
GetDlgItem
SetTimer
PtInRect
GetSubMenu
CheckMenuItem
SetWindowTextA
EndDialog
MessageBeep
SetWindowLongA
PostMessageA
IsIconic
GetWindowRect
GetSystemMetrics
MapWindowPoints
DefWindowProcA
KillTimer
BeginPaint
ClientToScreen
SetFocus
EndPaint
DispatchMessageA
FillRect
CreateWindowExA
GetWindowLongA
RegisterClassA
EnableMenuItem
LoadStringA
GetWindow
IsWindowEnabled
TranslateMessage
SetCapture
ShowWindow
UpdateWindow
GetParent
GetMessageA
DestroyWindow
GetClientRect
GetDC
IsWindow
SetWindowPos
ReleaseDC
PostQuitMessage
MoveWindow
SetForegroundWindow
GetDesktopWindow
MessageBoxA
GetSysColor
SystemParametersInfoA
IsWindowVisible
GetFocus
InvalidateRect
wsprintfA
EnableWindow
SetCursor
gdi32
CreateFontIndirectA
SetBkMode
SetTextColor
CreateCompatibleDC
CreateSolidBrush
SetBkColor
DeleteObject
DeleteDC
GetStockObject
GetDeviceCaps
oleaut32
SysAllocStringLen
SysFreeString
SysStringLen
VariantClear
Sections
.text Size: 461KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ