Static task
static1
Behavioral task
behavioral1
Sample
2ad6112339a99672e8439f6942482ab2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ad6112339a99672e8439f6942482ab2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ad6112339a99672e8439f6942482ab2_JaffaCakes118
-
Size
1.1MB
-
MD5
2ad6112339a99672e8439f6942482ab2
-
SHA1
71a00ce10e7ed3cd2eb6b2a90db66c4096c36092
-
SHA256
2ef084883c25b68cbea0615bfdfdb5574a7ab709889b77571cb233d46b19403e
-
SHA512
4008c7704cc1bea2f841f2711785cab0baee94021b73b71cf0c7001ff4337ee104c549c802ba64525f8041889c3b480bb4c3daab3fdb803c90b3df43b3c66131
-
SSDEEP
24576:HeG4kxZvWofAl+GlZZ7y1EypgtVn+4lOHYGyF7Xi7UzlNkkA3u:HkkxYPX3cpgtVnBlO9U7S7Yk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ad6112339a99672e8439f6942482ab2_JaffaCakes118
Files
-
2ad6112339a99672e8439f6942482ab2_JaffaCakes118.exe windows:4 windows x86 arch:x86
b15cb38ab6c565e093afe4b8ee5feac2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
GetUrlCacheConfigInfoA
FreeUrlCacheSpaceW
RetrieveUrlCacheEntryStreamA
GetUrlCacheConfigInfoW
DeleteUrlCacheEntryW
InternetQueryOptionA
InternetWriteFileExW
comctl32
InitCommonControlsEx
ImageList_DragMove
DrawStatusText
CreatePropertySheetPageW
ImageList_SetBkColor
ImageList_DrawIndirect
ImageList_AddIcon
CreateStatusWindow
user32
DdeUninitialize
TranslateAccelerator
RegisterDeviceNotificationA
EndDeferWindowPos
GetClipboardViewer
MessageBoxW
ChangeDisplaySettingsW
RegisterClassA
ShowWindow
InSendMessageEx
DdeCreateStringHandleW
InflateRect
UpdateWindow
DefDlgProcA
EnumWindows
IsDlgButtonChecked
DdeAddData
DdeKeepStringHandle
SwapMouseButton
CreateWindowExA
DestroyWindow
GrayStringW
DdeImpersonateClient
SendDlgItemMessageW
RegisterClassExA
DefWindowProcA
comdlg32
ChooseFontW
GetSaveFileNameW
ChooseColorW
GetFileTitleW
advapi32
ReportEventW
kernel32
SetEndOfFile
TerminateProcess
TlsFree
ExitProcess
GetStartupInfoA
GetCommandLineW
LeaveCriticalSection
SetEnvironmentVariableW
InterlockedIncrement
CreateMutexA
InterlockedDecrement
ReadFile
SetCurrentDirectoryW
GetCommandLineA
IsBadWritePtr
GetNamedPipeInfo
GetSystemTimeAsFileTime
FlushFileBuffers
DeleteCriticalSection
GetStringTypeA
GetProcAddress
TlsAlloc
GetFileType
CompareStringW
GetStringTypeExW
HeapCreate
GetModuleFileNameA
GetEnvironmentStringsW
HeapReAlloc
SetConsoleTitleA
GetPrivateProfileIntW
GetStringTypeW
LCMapStringW
HeapDestroy
SetFilePointer
FreeEnvironmentStringsW
InterlockedExchange
FreeEnvironmentStringsA
RtlUnwind
GetLocalTime
GetModuleFileNameW
GetCurrentProcess
SetEnvironmentVariableA
GetCurrentProcessId
GetModuleHandleA
GetSystemTime
GetLastError
HeapFree
GetStdHandle
LocalLock
GetTimeZoneInformation
GetCPInfo
WideCharToMultiByte
InitializeCriticalSection
TlsSetValue
SetStdHandle
LCMapStringA
OpenMutexA
LocalFileTimeToFileTime
EnterCriticalSection
WriteFile
GetCurrentThread
VirtualFree
VirtualAlloc
SetHandleCount
LoadLibraryA
GetVersion
GetEnvironmentStrings
MultiByteToWideChar
CompareStringA
GetStartupInfoW
TlsGetValue
CloseHandle
GetProcessHeaps
QueryPerformanceCounter
GetTickCount
GetCurrencyFormatW
UnhandledExceptionFilter
GetCurrentThreadId
HeapAlloc
VirtualQuery
SetLastError
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 240KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 749KB - Virtual size: 743KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ