Static task
static1
Behavioral task
behavioral1
Sample
2bc2788e7dc7e2feae742c7b30655c5c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bc2788e7dc7e2feae742c7b30655c5c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2bc2788e7dc7e2feae742c7b30655c5c_JaffaCakes118
-
Size
344KB
-
MD5
2bc2788e7dc7e2feae742c7b30655c5c
-
SHA1
1ae784e3a50ae76513e36f261c198b3df3a24daa
-
SHA256
17133750cedd41d34a21a79737e09ccb13e1afb0d9619fd5ac2af5c306aff5ec
-
SHA512
68a5a5e5492f6a546070f4b3f4abb83864479d3fa9a1dcfc3e973522d16c7794d6e12e12e9003d01bac98cec7154bf9d298986eaa150f432c1b290213a16b073
-
SSDEEP
6144:FCaa07UUzG7nr1srjlLr9d7GrV2qC+5WAr/6y7hkp/qcpM7h3SEwVo3Jlbun:7htzI6r5Lj60+5Wm3lkpqc27hCEHJlq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bc2788e7dc7e2feae742c7b30655c5c_JaffaCakes118
Files
-
2bc2788e7dc7e2feae742c7b30655c5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
6e5045b7c500ad72b5015af5335d32bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetProcessVersion
GetModuleHandleA
InterlockedExchange
SetConsoleCtrlHandler
QueryDosDeviceA
GetDateFormatW
TerminateProcess
FindNextFileW
GetCurrentThreadId
GetSystemDirectoryW
TransactNamedPipe
GetThreadSelectorEntry
WritePrivateProfileStringA
SetHandleCount
GetQueuedCompletionStatus
FreeLibrary
ScrollConsoleScreenBufferA
SleepEx
SetCommTimeouts
GetPrivateProfileStringA
OpenSemaphoreW
GetBinaryTypeA
UnlockFileEx
_lread
CreateFileA
FindFirstChangeNotificationA
CreateSemaphoreA
FindResourceExA
GlobalMemoryStatus
SetThreadIdealProcessor
GetStringTypeW
GetThreadContext
TlsFree
SetProcessShutdownParameters
IsValidCodePage
FreeResource
SetPriorityClass
SetEvent
GetEnvironmentStringsW
ExitProcess
SetUnhandledExceptionFilter
FindCloseChangeNotification
GetTapePosition
FillConsoleOutputAttribute
GetEnvironmentVariableA
PulseEvent
GetVersionExW
LockResource
lstrcmpA
GetHandleInformation
DeleteAtom
VirtualProtect
GetStartupInfoA
user32
IsZoomed
GetTopWindow
SetWindowRgn
InsertMenuW
AdjustWindowRect
LoadMenuW
GetKeyNameTextA
MsgWaitForMultipleObjects
SystemParametersInfoW
KillTimer
SetRect
GetClipCursor
IsClipboardFormatAvailable
GetDC
GetDCEx
ReleaseCapture
InsertMenuItemA
DestroyIcon
ValidateRect
EqualRect
SetClassLongA
OpenWindowStationA
CharUpperBuffA
DefMDIChildProcA
AppendMenuA
GetKeyState
LoadAcceleratorsA
GetClassLongW
OffsetRect
DialogBoxParamA
EnumDisplaySettingsExW
CreateIconIndirect
CreateDialogParamA
FrameRect
OemToCharBuffW
ScrollWindowEx
EnumWindowStationsA
DialogBoxParamW
CreateWindowExW
LoadBitmapA
MoveWindow
SetWindowContextHelpId
GetDlgItemTextA
SetUserObjectSecurity
CreateDialogIndirectParamW
IsCharLowerA
GetKeyboardLayout
DefWindowProcA
ClipCursor
CreateDialogParamW
ExitWindowsEx
DrawFocusRect
GetParent
DrawTextA
GetClassInfoA
UnionRect
IsWindowVisible
SendMessageTimeoutW
gdi32
GetEnhMetaFileHeader
GetViewportExtEx
CreateEnhMetaFileW
CombineRgn
SaveDC
EnumObjects
CreateICW
RectVisible
comdlg32
GetSaveFileNameA
GetOpenFileNameW
FindTextA
advapi32
CryptAcquireContextA
RevertToSelf
ChangeServiceConfigW
NotifyBootConfigStatus
GetExplicitEntriesFromAclW
CryptGetKeyParam
IsValidSecurityDescriptor
GetSidSubAuthority
RegOpenKeyExW
RegEnumValueW
BuildSecurityDescriptorW
RegSetValueA
AddAccessAllowedAce
LookupAccountNameA
InitiateSystemShutdownW
RegReplaceKeyW
RegQueryValueA
OpenServiceA
CryptSetKeyParam
ObjectCloseAuditAlarmW
OpenThreadToken
CryptHashData
CryptReleaseContext
UnlockServiceDatabase
GetSidIdentifierAuthority
SetNamedSecurityInfoA
GetUserNameW
SetSecurityDescriptorOwner
LookupPrivilegeValueW
LookupPrivilegeDisplayNameA
SetServiceObjectSecurity
RegDeleteValueA
SetSecurityInfo
StartServiceCtrlDispatcherA
MakeSelfRelativeSD
SetEntriesInAclA
SetPrivateObjectSecurity
CryptSignHashW
CopySid
ReadEventLogW
BuildTrusteeWithNameW
shell32
SHBrowseForFolderW
SHLoadInProc
DragFinish
ole32
MkParseDisplayName
RegisterDragDrop
CoCreateGuid
oleaut32
SysAllocStringLen
SafeArrayRedim
SafeArrayUnaccessData
VariantChangeType
VariantCopyInd
QueryPathOfRegTypeLi
LoadTypeLi
shlwapi
SHEnumValueW
StrCatBuffW
StrCmpLogicalW
StrFormatKBSizeW
UrlGetPartA
PathAppendW
StrPBrkW
setupapi
SetupDiEnumDriverInfoA
SetupOpenFileQueue
msvcrt
__p__commode
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strlen
__p__fmode
__set_app_type
_except_handler3
_adjust_fdiv
_controlfp
Sections
.text Size: 312KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE