Static task
static1
Behavioral task
behavioral1
Sample
2b721f3ee902dd4e41bfe027c189bad3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b721f3ee902dd4e41bfe027c189bad3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2b721f3ee902dd4e41bfe027c189bad3_JaffaCakes118
-
Size
392KB
-
MD5
2b721f3ee902dd4e41bfe027c189bad3
-
SHA1
69506a9fb7c0417ad7d8d907f19550dae651f3eb
-
SHA256
018f6526813becfb2356342ccffdc46b40ee1c904d97ce3f8943773a40182de2
-
SHA512
361399860ca0d8d847e180d1cf9487e3c3853fee569f794ec1e06838368eb0ba593d3c1c7002d5a68f12dd6d8722be8c04f48aca3a6001c2e853cbea29ad9f06
-
SSDEEP
6144:TyJw3Wfqah79/0soR/9z76+UIwIO7E+c1HXF1tlFfvmP9pUdrCeXTNkzPqA:Gtfr9/017LnVObG31WMdrCOiziA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b721f3ee902dd4e41bfe027c189bad3_JaffaCakes118
Files
-
2b721f3ee902dd4e41bfe027c189bad3_JaffaCakes118.exe windows:4 windows x86 arch:x86
26b416037c61349bafd5fc594a105f32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOverlappedResult
SetMailslotInfo
GetTimeZoneInformation
InitializeCriticalSection
GetLogicalDriveStringsA
GetNumberFormatW
GlobalFlags
_hread
OpenFile
lstrcatW
ReadConsoleOutputA
EndUpdateResourceA
GetLocaleInfoW
CloseHandle
EnumSystemCodePagesW
GetComputerNameW
GetSystemDefaultLangID
SetEnvironmentVariableW
GetFileType
GetDriveTypeW
WriteConsoleOutputCharacterA
GetFileAttributesExA
IsProcessorFeaturePresent
IsBadReadPtr
GetWindowsDirectoryA
VirtualLock
GetTapeParameters
GetVersionExA
GetCommandLineA
FindResourceExA
ExitProcess
ReleaseMutex
SetNamedPipeHandleState
UnmapViewOfFile
EnumResourceLanguagesW
GlobalFree
lstrcmpA
GetFileInformationByHandle
CreatePipe
CreateDirectoryA
_lread
_llseek
TlsGetValue
FatalAppExitA
FindNextChangeNotification
SetVolumeLabelA
lstrcmpiW
FindResourceExW
SetEvent
_lclose
GlobalDeleteAtom
EnumTimeFormatsW
SetProcessAffinityMask
FormatMessageW
DuplicateHandle
CreateIoCompletionPort
SetConsoleActiveScreenBuffer
GetAtomNameA
ExitThread
GetSystemTimeAsFileTime
ReleaseSemaphore
GlobalUnlock
VirtualProtect
user32
BeginPaint
EnumDisplayDevicesW
RemoveMenu
SetScrollRange
TranslateAcceleratorA
TranslateMDISysAccel
GetScrollBarInfo
GetDlgItemTextW
SetFocus
MessageBoxExA
RegisterClassW
GetWindowPlacement
CreateCaret
GetTopWindow
CharPrevW
GetMenuState
EnumDisplayMonitors
BringWindowToTop
GetClipboardViewer
SetDlgItemInt
LoadIconA
DrawTextW
FlashWindow
SetWindowContextHelpId
GetWindowTextLengthA
MapVirtualKeyExW
PostThreadMessageW
gdi32
SetPixelV
CreateFontW
CreateFontIndirectA
RectInRegion
GetTextExtentPointA
GetRgnBox
comdlg32
PrintDlgW
advapi32
GetUserNameA
SetThreadToken
LookupPrivilegeDisplayNameA
CryptExportKey
CryptGetProvParam
CopySid
CryptDecrypt
RegSetKeySecurity
OpenServiceA
QueryServiceConfigW
CryptEncrypt
RegReplaceKeyW
CryptSetProvParam
FreeSid
DestroyPrivateObjectSecurity
DuplicateToken
RegQueryValueExA
OpenSCManagerA
SetTokenInformation
InitiateSystemShutdownA
CryptImportKey
IsValidSid
shell32
SHGetSettings
ole32
CoTaskMemRealloc
OleCreateLink
CreateBindCtx
CoTreatAsClass
oleaut32
SafeArrayRedim
VariantChangeType
VariantCopy
SetErrorInfo
comctl32
ImageList_GetDragImage
ImageList_GetImageCount
PropertySheetW
shlwapi
StrTrimA
StrStrIW
PathIsRootA
PathRemoveExtensionW
StrChrIA
StrDupW
UrlApplySchemeW
UrlGetPartA
PathIsRelativeA
PathIsRootW
PathIsURLW
SHCopyKeyA
StrChrIW
SHRegCreateUSKeyW
PathAppendW
StrToIntW
SHGetValueW
setupapi
SetupDiGetDeviceInstallParamsW
SetupGetInfFileListA
SetupCloseLog
SetupDiOpenDeviceInterfaceW
SetupDiClassNameFromGuidW
SetupDiDeleteDeviceInfo
SetupInstallFromInfSectionW
SetupDiEnumDeviceInterfaces
SetupIterateCabinetW
Sections
.text Size: 332KB - Virtual size: 330KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE