Static task
static1
Behavioral task
behavioral1
Sample
2a3819250a0ee2f51462bf5358e3dab8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a3819250a0ee2f51462bf5358e3dab8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a3819250a0ee2f51462bf5358e3dab8_JaffaCakes118
-
Size
340KB
-
MD5
2a3819250a0ee2f51462bf5358e3dab8
-
SHA1
65c39e879088b9e71f15b6c878feecfad7d52cdb
-
SHA256
e64af0360ee5b1e4bc124980ce33a6fcf9a8cee1b4ac3ffb3c611d97fa500a4e
-
SHA512
16ca8950e3611ef9b1cf2bcd0166291d663a51b567e54e8c38cedf418f08c404d07b1c1be11be4f6e4dfece5b005da115734ded0601781e0648dec0b3ed70c85
-
SSDEEP
6144:WMfg6mYKTFWa55ohJb0WfqWofsv7FM7cYOXD9g9Zm9culncOw/wBYF:06B4FWa55okmT3FM7cFDg2nHw/w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a3819250a0ee2f51462bf5358e3dab8_JaffaCakes118
Files
-
2a3819250a0ee2f51462bf5358e3dab8_JaffaCakes118.exe windows:4 windows x86 arch:x86
83265bf8630f2aa23f2ed2d12de1441a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ClearCommBreak
DeleteFiber
Beep
WriteProcessMemory
VirtualLock
GetFullPathNameA
GetVolumeInformationW
EnumDateFormatsW
GetOverlappedResult
ExitThread
SetNamedPipeHandleState
CopyFileExW
SetThreadLocale
GetDriveTypeA
SetLastError
ReleaseSemaphore
GetLongPathNameA
MultiByteToWideChar
lstrcmpiW
FindFirstFileA
ExpandEnvironmentStringsW
TlsGetValue
DuplicateHandle
WaitNamedPipeA
CreateDirectoryW
GetCompressedFileSizeW
DosDateTimeToFileTime
GlobalAddAtomA
ReadConsoleOutputA
CompareStringA
GetBinaryTypeW
GetEnvironmentVariableW
CreateWaitableTimerA
FindResourceExW
GetLocaleInfoW
FormatMessageW
GetProcessHeap
GetThreadPriority
GetACP
FindFirstFileExW
GetFileInformationByHandle
VirtualProtect
GetVersionExA
SetProcessWorkingSetSize
GetFileAttributesA
EraseTape
GetPrivateProfileSectionW
IsDBCSLeadByteEx
CreateFileW
GetCurrentDirectoryW
OpenMutexA
SetConsoleTitleA
GlobalUnlock
CreateProcessA
LocalAlloc
GlobalReAlloc
EnumTimeFormatsW
FileTimeToLocalFileTime
CreateDirectoryA
SetStdHandle
GetUserDefaultLangID
SetConsoleWindowInfo
LocalFileTimeToFileTime
MoveFileW
EnumCalendarInfoA
GetDateFormatA
LocalReAlloc
GetSystemTime
GetCommandLineA
RemoveDirectoryA
ExitProcess
user32
GetMenuItemInfoW
GetClassNameW
WindowFromPoint
LoadIconA
CallWindowProcW
EndDeferWindowPos
GetScrollInfo
PtInRect
ArrangeIconicWindows
GetMenuState
EnumWindowStationsW
GetLastActivePopup
EnumWindowStationsA
GetWindowWord
FillRect
LoadMenuIndirectW
GrayStringA
IsCharAlphaNumericA
IsWindowVisible
SystemParametersInfoW
ShowScrollBar
GetMessageA
SetUserObjectInformationW
GetUserObjectSecurity
DefDlgProcA
UnionRect
EmptyClipboard
LoadAcceleratorsW
WaitMessage
SetActiveWindow
SetFocus
PostThreadMessageW
GetGuiResources
FrameRect
EnumDesktopsW
DispatchMessageA
BringWindowToTop
SendNotifyMessageA
CharNextW
gdi32
GetROP2
SetWorldTransform
SelectClipPath
OffsetWindowOrgEx
PtVisible
GetBitmapBits
GetMapMode
CreateCompatibleDC
LineTo
PolyPolyline
SetBkMode
comdlg32
ChooseColorA
PrintDlgW
CommDlgExtendedError
advapi32
DeregisterEventSource
CryptEncrypt
RegCloseKey
SetSecurityDescriptorOwner
LogonUserA
DuplicateTokenEx
AddAccessAllowedAce
RegDeleteKeyW
GetSidSubAuthorityCount
GetFileSecurityA
CreateServiceA
CreateServiceW
AbortSystemShutdownW
CryptSetProvParam
RegCreateKeyW
shell32
ExtractIconA
SHGetSpecialFolderPathW
SHLoadInProc
ole32
CoGetTreatAsClass
OleBuildVersion
CoFreeUnusedLibraries
CoUninitialize
OleRegGetUserType
OleQueryLinkFromData
OleSetClipboard
OleSave
OleSaveToStream
StgCreateStorageEx
oleaut32
SysStringLen
SafeArrayRedim
QueryPathOfRegTypeLi
SetErrorInfo
SafeArrayPutElement
shlwapi
PathFileExistsA
wvnsprintfW
SHStrDupW
StrChrW
PathRemoveFileSpecA
SHAutoComplete
SHCreateStreamOnFileW
StrRStrIW
SHRegWriteUSValueW
UrlCreateFromPathW
setupapi
SetupGetIntField
SetupCloseLog
SetupDiGetDriverInfoDetailW
SetupDiGetDeviceRegistryPropertyW
SetupScanFileQueueA
SetupGetLineTextW
SetupDiGetINFClassA
SetupDiRemoveDevice
SetupOpenInfFileW
SetupLogErrorW
Sections
.text Size: 292KB - Virtual size: 289KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE