Static task
static1
Behavioral task
behavioral1
Sample
2b8254ec18931e4f6776b1ef84cb2165_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b8254ec18931e4f6776b1ef84cb2165_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2b8254ec18931e4f6776b1ef84cb2165_JaffaCakes118
-
Size
580KB
-
MD5
2b8254ec18931e4f6776b1ef84cb2165
-
SHA1
e07f6a2c4f01295951016a14a335a25a362db8a6
-
SHA256
7e87da8a2003ce42160b3221c6226fa021cb7b0ca424de9585a95415e8584ad9
-
SHA512
19ed0b52b6f18bcbc2fcf49e305ac369977c577a69eaefcde383c3b95e162726937306cebb0365b013d9552339e9ed657ab1230b2ae667fbd7f526ce8dc1c9ca
-
SSDEEP
12288:chFNs76eztSqbhMuSnm4nSGgiJLo9ufWBRG4LCyuY3ntLTlwaCq1:8NOPZCumNSdPSaTXRTl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b8254ec18931e4f6776b1ef84cb2165_JaffaCakes118
Files
-
2b8254ec18931e4f6776b1ef84cb2165_JaffaCakes118.exe windows:4 windows x86 arch:x86
674525a8d8ed8ce01dc49e24002b7f50
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenu
SetParent
DefWindowProcA
IsDialogMessage
GetDC
ScrollWindowEx
FindWindowExA
GetKeyboardLayout
CreateWindowExA
ShowWindow
EmptyClipboard
GetKeyboardLayoutNameA
LoadAcceleratorsA
GetClipboardFormatNameW
SetSysColors
GetNextDlgGroupItem
DdeSetQualityOfService
DialogBoxParamW
SetMenuItemBitmaps
FreeDDElParam
EnumWindows
SystemParametersInfoW
DrawEdge
SendMessageTimeoutA
GetDlgItemTextW
RegisterHotKey
OpenClipboard
GetDesktopWindow
SendNotifyMessageA
InvalidateRgn
RegisterClassA
CallWindowProcA
MessageBoxA
SetPropA
RegisterClassExA
GetClassInfoA
DestroyWindow
MonitorFromPoint
comctl32
ImageList_GetIcon
_TrackMouseEvent
CreatePropertySheetPageA
InitCommonControlsEx
ImageList_Destroy
kernel32
EnterCriticalSection
GetModuleFileNameW
WriteConsoleInputW
ExitThread
GetCurrentThread
LoadLibraryA
VirtualFree
GetVersionExA
ExpandEnvironmentStringsA
PulseEvent
TlsAlloc
IsValidCodePage
GetStringTypeA
SetHandleCount
TlsFree
GetTempFileNameA
SetFilePointer
CreateMutexW
FlushFileBuffers
SetThreadLocale
TerminateProcess
LoadResource
GetPrivateProfileStringW
IsValidLocale
FileTimeToSystemTime
GetUserDefaultLCID
HeapValidate
GetStringTypeW
SuspendThread
GetPrivateProfileStructA
HeapSize
QueryPerformanceCounter
GetModuleHandleA
GetTimeZoneInformation
CompareStringW
FindFirstFileW
WriteConsoleA
lstrcmpW
Sleep
GetOEMCP
ReadConsoleInputA
GetCurrentProcess
HeapFree
GetCurrentThreadId
WritePrivateProfileStructA
SetEndOfFile
LCMapStringW
FreeEnvironmentStringsW
lstrcpyA
GetCurrentProcessId
GetEnvironmentStrings
RaiseException
MapViewOfFileEx
GetLogicalDrives
TlsGetValue
HeapDestroy
GetConsoleCP
OpenSemaphoreW
GetStartupInfoA
GetProcessHeap
GetEnvironmentStringsW
UnhandledExceptionFilter
GetFileType
GetCPInfo
EnumSystemLocalesA
GetExitCodeThread
WriteConsoleW
FindClose
FindNextFileA
GetSystemTimeAsFileTime
GetLocaleInfoW
LCMapStringA
WriteConsoleOutputCharacterA
MultiByteToWideChar
HeapReAlloc
ExitProcess
EnumTimeFormatsW
GetFullPathNameA
GetConsoleOutputCP
GetWindowsDirectoryW
ReadFile
GetDateFormatA
VirtualProtect
lstrcatA
EnumResourceLanguagesW
GetTimeFormatA
OpenEventW
CloseHandle
WriteFile
CreateMutexA
GetLocaleInfoA
GetProcAddress
CreateFileA
GetModuleFileNameA
GetTickCount
GetStdHandle
InterlockedDecrement
HeapCreate
IsDebuggerPresent
SetLastError
GetConsoleMode
ReadFileEx
CreateMailslotA
RtlUnwind
FreeLibrary
GetLongPathNameA
SetEnvironmentVariableA
WriteFileEx
TlsSetValue
GetLastError
VirtualQuery
DeleteCriticalSection
CompareStringA
LocalFree
OpenMutexA
GetACP
GetPrivateProfileSectionW
GetCommandLineA
LeaveCriticalSection
SetStdHandle
InterlockedIncrement
FreeEnvironmentStringsA
FindResourceExW
SetUnhandledExceptionFilter
WideCharToMultiByte
InitializeCriticalSection
HeapAlloc
VirtualAlloc
SetConsoleCtrlHandler
InterlockedExchange
GetThreadPriority
Sections
.text Size: 176KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ