Static task
static1
Behavioral task
behavioral1
Sample
2ad260eba4e7c5a73f41f64d7ed40383_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ad260eba4e7c5a73f41f64d7ed40383_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ad260eba4e7c5a73f41f64d7ed40383_JaffaCakes118
-
Size
332KB
-
MD5
2ad260eba4e7c5a73f41f64d7ed40383
-
SHA1
ae5b7511dd16ef24f9e9885a6307d36ba2125a51
-
SHA256
93b20b91415d7cfb3e2469c476453862f72a0fa2023e1d5b7b326d3b420ba2ce
-
SHA512
35817e3256ebdb0ee343368c6da66a8bc21b96b1c2222ab05877fe798ccb2017fe959cc5b0228b00f8fc3a8d72a80df302c2f28d1f9d124bbdfc98c96c7b1c4c
-
SSDEEP
6144:OrOjEnJo5L4l9UW5s7avzzQvufhk24oyeK1/SgxYtZQuCXff3LWbGDZRguv:OgEnJnzdGafqufC2Lg/BxmQJf3EGDZC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ad260eba4e7c5a73f41f64d7ed40383_JaffaCakes118
Files
-
2ad260eba4e7c5a73f41f64d7ed40383_JaffaCakes118.exe windows:4 windows x86 arch:x86
eff5fe767b98ceb5151f2a7b080a8003
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnmapViewOfFile
GetStringTypeExW
GetCPInfo
GetSystemTimeAsFileTime
SetHandleCount
CompareStringW
GetFileInformationByHandle
CreateFileW
FreeLibrary
DeleteFiber
UnhandledExceptionFilter
OutputDebugStringA
GetProfileIntA
SetConsoleCursorPosition
GlobalAddAtomA
MultiByteToWideChar
EnumResourceLanguagesW
CreateDirectoryA
ReadConsoleOutputA
RemoveDirectoryW
GetSystemDefaultLangID
VirtualProtect
SearchPathW
GetConsoleMode
GetComputerNameW
DuplicateHandle
GetShortPathNameA
PrepareTape
WritePrivateProfileSectionW
GlobalFindAtomW
FindNextChangeNotification
LoadResource
GetBinaryTypeA
SetConsoleTitleA
SetConsoleMode
GetTimeZoneInformation
GetDriveTypeW
SetLastError
ClearCommBreak
lstrcmpiA
DosDateTimeToFileTime
AreFileApisANSI
GetHandleInformation
SetFileTime
ConnectNamedPipe
FindFirstFileA
GlobalFree
_lopen
GetCompressedFileSizeW
GetProcessHeap
CreateDirectoryW
WritePrivateProfileStringA
OpenMutexA
SetEnvironmentVariableA
GetVolumeInformationW
ReadConsoleInputW
FileTimeToLocalFileTime
SetTimeZoneInformation
RaiseException
GetFileType
GetOEMCP
FormatMessageA
VirtualAllocEx
DeleteCriticalSection
FindFirstFileExW
SetConsoleWindowInfo
WritePrivateProfileSectionA
ReadDirectoryChangesW
GetLargestConsoleWindowSize
ReadConsoleA
GetCommandLineA
GetVersionExA
_lread
ExitProcess
user32
DrawTextExW
SetPropW
DispatchMessageW
ValidateRgn
ScrollDC
ReleaseCapture
GetScrollPos
GetMenuInfo
GetClassInfoA
GetWindowPlacement
SubtractRect
SetDlgItemTextA
SetWindowLongW
OpenDesktopW
SendInput
DefFrameProcA
CallWindowProcA
GetNextDlgTabItem
CopyIcon
ChangeDisplaySettingsA
NotifyWinEvent
PostMessageW
EnumDisplayMonitors
HiliteMenuItem
mouse_event
gdi32
GetSystemPaletteEntries
GetTextColor
GetStretchBltMode
CreateFontIndirectA
RoundRect
comdlg32
ChooseFontW
advapi32
RegCloseKey
OpenSCManagerA
RegDeleteKeyW
ControlService
RegOpenKeyExW
DeleteAce
ObjectCloseAuditAlarmA
ObjectDeleteAuditAlarmW
RegisterEventSourceA
GetSecurityInfo
MakeAbsoluteSD
RegCreateKeyW
GetTokenInformation
AccessCheckAndAuditAlarmA
IsValidAcl
ImpersonateSelf
shell32
Shell_NotifyIconW
DragFinish
ole32
CoCreateInstanceEx
CoInitializeEx
shlwapi
StrChrIA
UrlCombineW
StrDupW
PathAddExtensionW
AssocQueryStringW
PathIsDirectoryEmptyW
SHRegOpenUSKeyW
PathRemoveFileSpecW
StrCatBuffW
UrlGetPartA
setupapi
SetupDiGetDeviceInstanceIdW
SetupDiCreateDeviceInfoA
SetupDiGetClassDevsExA
SetupGetStringFieldA
SetupDiGetDeviceInstanceIdA
SetupCloseLog
Sections
.text Size: 304KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE