Static task
static1
Behavioral task
behavioral1
Sample
2b7de93378274789dce9cc70531c904d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2b7de93378274789dce9cc70531c904d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2b7de93378274789dce9cc70531c904d_JaffaCakes118
-
Size
516KB
-
MD5
2b7de93378274789dce9cc70531c904d
-
SHA1
fa7d0bc595ef7d6df99f409cf00568d9f050ebb4
-
SHA256
3ea81299fcb02a56d29895ab8c14da72591143b9f7dd2173c7a76b43462d53e6
-
SHA512
82060477012b2b508941158bf37bcc2206489b8118972a271b671e8f134ac4f590d4e58ecf37ddc209333d6748c5496d7de79f29d17689daf68aa91ebbb359a7
-
SSDEEP
12288:sRlnTDV8evOud2FTwLlqps8YeAbO7eD0uw2BnM:kn3VuuYFElqppzAi7DuBS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b7de93378274789dce9cc70531c904d_JaffaCakes118
Files
-
2b7de93378274789dce9cc70531c904d_JaffaCakes118.exe windows:4 windows x86 arch:x86
2a3806920e9c461fe107e59553e2480d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
SetComputerNameW
SetConsoleCtrlHandler
CreateDirectoryW
GetProcessShutdownParameters
GetStringTypeA
WriteConsoleW
GetProfileIntW
OpenMutexA
FlushViewOfFile
SetEnvironmentVariableA
CreateDirectoryA
GetModuleFileNameW
ReadConsoleInputW
TlsFree
ReadConsoleOutputA
GetVolumeInformationA
GetModuleHandleA
GetStartupInfoA
lstrcmpA
SetSystemTime
GetProfileSectionA
EnterCriticalSection
HeapFree
GetSystemTimeAsFileTime
IsDebuggerPresent
GetCurrentProcess
IsBadWritePtr
VirtualQuery
ReadConsoleOutputAttribute
WriteFile
GetCurrentThread
LoadLibraryA
OutputDebugStringW
SuspendThread
GetTimeZoneInformation
SetFilePointer
GetConsoleTitleA
QueryPerformanceCounter
LeaveCriticalSection
EnumSystemCodePagesW
GetCurrentDirectoryA
GlobalAddAtomW
UnhandledExceptionFilter
FindResourceA
GetLocaleInfoW
LCMapStringW
TlsAlloc
WaitNamedPipeA
InterlockedIncrement
OutputDebugStringA
MapViewOfFileEx
HeapReAlloc
VirtualProtect
GetStartupInfoW
SetVolumeLabelA
SetHandleCount
SetLastError
GetCurrentProcessId
FreeEnvironmentStringsW
GetConsoleCursorInfo
GetUserDefaultLCID
FlushFileBuffers
WriteConsoleA
GetProfileSectionW
ExpandEnvironmentStringsW
SetUnhandledExceptionFilter
TlsGetValue
FreeEnvironmentStringsA
GetTimeFormatA
GetEnvironmentStrings
WriteConsoleInputA
TerminateProcess
ExitProcess
GetLastError
GetCurrentThreadId
TryEnterCriticalSection
GetACP
HeapDestroy
GetVersionExA
GetModuleHandleW
GetPrivateProfileStructA
VirtualFree
GetLocaleInfoA
GetOEMCP
GetStringTypeW
FreeLibrary
IsValidCodePage
CompareStringW
DebugBreak
EnumResourceLanguagesW
InterlockedExchange
CreateMutexA
lstrcpyA
CloseHandle
MultiByteToWideChar
GetEnvironmentStringsW
RtlUnwind
VirtualAlloc
ReleaseSemaphore
GetProcAddress
VirtualFreeEx
GetTickCount
GetTempFileNameA
UnmapViewOfFile
IsValidLocale
ReadFile
GetCompressedFileSizeW
ReadConsoleInputA
HeapCreate
GetStdHandle
EnumSystemLocalesA
GetFileType
GetModuleFileNameA
GetDateFormatA
TlsSetValue
HeapAlloc
GetCommandLineA
InterlockedExchangeAdd
GetCPInfo
IsBadReadPtr
GetCalendarInfoA
lstrcatW
GetSystemInfo
WideCharToMultiByte
DeleteCriticalSection
InterlockedDecrement
SetStdHandle
GetCommandLineW
LCMapStringA
HeapValidate
LocalAlloc
GetThreadLocale
CompareStringA
comdlg32
ReplaceTextW
FindTextA
user32
CreateWindowStationW
RegisterClassExA
SetClipboardViewer
IsWindowVisible
SetShellWindow
GetCaretBlinkTime
DefWindowProcA
GetWindowDC
GetKeyNameTextW
SetTimer
DrawMenuBar
SetWindowsHookExA
RegisterClassA
CharLowerA
SetWindowsHookA
DestroyAcceleratorTable
ExcludeUpdateRgn
ShowWindow
TranslateMDISysAccel
MessageBoxA
GetClassNameA
SetActiveWindow
MonitorFromRect
CreateWindowExW
GetDlgItemTextW
DestroyMenu
DestroyWindow
ChangeDisplaySettingsA
SetMenu
ChangeMenuW
CreateDialogParamW
WINNLSEnableIME
GetAncestor
MessageBoxW
IsCharAlphaNumericW
SetWindowLongW
comctl32
ImageList_SetFilter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
CreatePropertySheetPageA
ImageList_Remove
ImageList_DragLeave
ImageList_Destroy
CreateStatusWindow
ImageList_Write
ImageList_GetImageInfo
ImageList_AddMasked
CreateToolbarEx
ImageList_LoadImageA
InitCommonControlsEx
ImageList_SetOverlayImage
ImageList_SetIconSize
ImageList_GetImageRect
ImageList_Merge
ImageList_SetImageCount
CreateStatusWindowA
_TrackMouseEvent
ImageList_SetFlags
DrawStatusTextA
GetEffectiveClientRect
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ