Static task
static1
Behavioral task
behavioral1
Sample
2a4e2ee32ca84a82a8d0e7b4a35a5068_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a4e2ee32ca84a82a8d0e7b4a35a5068_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a4e2ee32ca84a82a8d0e7b4a35a5068_JaffaCakes118
-
Size
364KB
-
MD5
2a4e2ee32ca84a82a8d0e7b4a35a5068
-
SHA1
a21de1a2dd669faf687d7659d5e4d4db043cb707
-
SHA256
9082b4272999c64e2931d63ec787d20565401ac14161e77117e5e5c99be4cbaf
-
SHA512
ad869d92d4ae378c53f485d532718ea724b6db1fc999a07d73749834e7963b114de9351da39593775a083a3cd7a36200f2680804fe806ad28d5db416b2746f15
-
SSDEEP
6144:yjUgxTWbvpixxkYkTVw3WitSxbMnbZTB/l7MAOjV9IHc0:yggxSbvpOgPitOMntThl7MXq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a4e2ee32ca84a82a8d0e7b4a35a5068_JaffaCakes118
Files
-
2a4e2ee32ca84a82a8d0e7b4a35a5068_JaffaCakes118.exe windows:4 windows x86 arch:x86
df55e8d1d3e4b48c5656517a71ff7ae7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
LoadResource
GetFileSize
CreateFileA
GetModuleFileNameA
GetProcAddress
TerminateProcess
Sleep
WinExec
GetSystemDirectoryW
WideCharToMultiByte
DeleteFileW
SearchPathA
GetShortPathNameA
MultiByteToWideChar
GetLastError
CreateMutexW
CreateEventW
WaitForSingleObject
OpenEventW
GetSystemTime
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
SystemTimeToFileTime
LoadLibraryExW
ReadFile
LockResource
CreateJobObjectW
GetModuleHandleW
ExitProcess
GetTickCount
SearchPathW
GetShortPathNameW
CreateFileW
WriteFile
CloseHandle
SetEvent
FindResourceA
AllocateUserPhysicalPages
LoadLibraryA
SizeofResource
GetModuleFileNameW
ExitThread
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
HeapAlloc
HeapFree
RtlUnwind
ResumeThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
GetProcessHeap
GetStartupInfoW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentProcess
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetHandleCount
user32
GetWindowRect
GetDC
SetTimer
UnregisterClassW
DefWindowProcW
KillTimer
PostQuitMessage
BeginPaint
EndPaint
GetClientRect
CreateWindowExW
DrawTextW
GetWindowDC
ReleaseDC
ExitWindowsEx
UpdateWindow
CreateWindowExA
GetDesktopWindow
ShowWindow
DialogBoxParamW
GetWindowLongA
SetDlgItemTextA
GetMessageW
SetWindowLongW
TranslateMessage
DispatchMessageW
gdi32
SetBkMode
SetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDIBits
DeleteDC
CreatePen
SelectObject
CreateSolidBrush
Rectangle
DeleteObject
SetDIBitsToDevice
CreateFontW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
rpcrt4
UuidToStringW
RpcStringFreeW
UuidCreate
wininet
InternetCrackUrlW
Sections
.text Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ