Static task
static1
Behavioral task
behavioral1
Sample
2bb7a349561825d412734e073938e972_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bb7a349561825d412734e073938e972_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2bb7a349561825d412734e073938e972_JaffaCakes118
-
Size
156KB
-
MD5
2bb7a349561825d412734e073938e972
-
SHA1
8ecf38ab78a281fb6d3d34ee4c109292a957dede
-
SHA256
d1f4e2895f29032da8f631bd80ed50938c7139070277f1f38623ee7581377e1b
-
SHA512
2797b414c446847d0e45dc941b27861f7432898338e879e5374a81f5a0fb25bb6821b77c5166db67b0fd9ee9fa564a9035064c2ccbb73a76dfb1fa3bcca74c2a
-
SSDEEP
3072:X1u7wtgqd41S2FbVnKTQA89oof3BVImhdJ+ytrJ:X1u7cd4Q2FBA89oI3BemlJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bb7a349561825d412734e073938e972_JaffaCakes118
Files
-
2bb7a349561825d412734e073938e972_JaffaCakes118.exe windows:4 windows x86 arch:x86
e7ef66f6303360f437349268b0790464
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderPathA
wininet
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
shlwapi
StrStrA
PathFileExistsA
PathFindFileNameA
SHGetValueA
kernel32
GetTickCount
GetCurrentProcessId
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
LocalFree
FormatMessageA
QueryPerformanceCounter
GlobalLock
GlobalAlloc
GlobalFree
GetThreadLocale
GlobalGetAtomNameA
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
lstrcmpA
GlobalFlags
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetStartupInfoA
GetProcessHeap
GetVersionExA
GetCommandLineA
RaiseException
GetSystemTimeAsFileTime
RtlUnwind
GetModuleHandleA
VirtualAlloc
HeapReAlloc
HeapFree
HeapAlloc
GetTempPathA
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteFileA
SetLastError
Sleep
lstrlenA
CompareStringA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
TerminateProcess
CloseHandle
FreeLibrary
LoadLibraryA
GetProcAddress
GlobalUnlock
user32
DestroyMenu
PostQuitMessage
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetWindowPos
SetWindowLongA
IsWindow
GetDlgItem
GetFocus
ClientToScreen
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
UnregisterClassA
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
GetKeyState
PeekMessageA
ValidateRect
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
CheckMenuItem
LoadIconA
WinHelpA
PostMessageA
GetWindowThreadProcessId
GetWindowTextA
GetWindow
MessageBoxA
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
RegisterWindowMessageA
gdi32
GetClipBox
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
SelectObject
CreateBitmap
SetMapMode
GetStockObject
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
OffsetViewportOrgEx
GetDeviceCaps
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetViewportOrgEx
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ