Static task
static1
Behavioral task
behavioral1
Sample
2c6a49568e1733b66ef9dd2fa659aedb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c6a49568e1733b66ef9dd2fa659aedb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c6a49568e1733b66ef9dd2fa659aedb_JaffaCakes118
-
Size
1.6MB
-
MD5
2c6a49568e1733b66ef9dd2fa659aedb
-
SHA1
2b1e7d54723cf9ee2fd133b8f17fa99470d7a51a
-
SHA256
182ab7eb1dce2827a05aff0d83a13dd8346bd3b8ab2dfb681817a0d3aab05b15
-
SHA512
bc7dd28695818c7081cfc217530d3a1f9bcd83d7c48f3fa67aa2135433ec04dffccce4b0d366aef1a3216fc946ec0d488756d1bca9deff73c981119b0f31e5bd
-
SSDEEP
12288:7qX513h6F/ND4SO8ZSLLnDfXO0uXxb3BYMlodb28:E5dc7O/z+0uXxb3B3mb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c6a49568e1733b66ef9dd2fa659aedb_JaffaCakes118
Files
-
2c6a49568e1733b66ef9dd2fa659aedb_JaffaCakes118.exe windows:5 windows x86 arch:x86
9411e4ab1500ae4eda93472788599ebe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetTickCount
Sleep
GetProcAddress
VirtualAlloc
LoadLibraryA
VirtualProtect
ExitThread
FormatMessageA
LocalFree
CreateWaitableTimerA
SetWaitableTimer
ResumeThread
ResetEvent
OpenEventA
GetSystemInfo
SetEnvironmentVariableA
CompareStringW
CreateFileW
GetDriveTypeW
SetEndOfFile
FreeLibrary
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetProcessHeap
WaitForMultipleObjects
ReleaseSemaphore
DuplicateHandle
HeapAlloc
CreateEventA
CloseHandle
GetCurrentProcess
HeapFree
CreateSemaphoreA
WaitForSingleObject
SetEvent
GetSystemTimeAsFileTime
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetLastError
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
ReadFile
DeleteFileA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
HeapReAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
WriteFile
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetCurrentProcessId
FatalAppExitA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetConsoleCtrlHandler
LoadLibraryW
GetLocaleInfoW
GetTimeZoneInformation
SetStdHandle
CreateFileA
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
SetCurrentDirectoryW
GetStringTypeW
HeapSize
GetACP
GetOEMCP
CreateThread
user32
EndPaint
DestroyWindow
GetMessageA
RegisterClassExA
PostQuitMessage
LoadStringA
LoadIconA
BeginPaint
TranslateMessage
CreateWindowExA
TranslateAcceleratorA
EndDialog
DefWindowProcA
LoadAcceleratorsA
ShowWindow
DispatchMessageA
UpdateWindow
LoadCursorA
DialogBoxParamA
Sections
.text Size: 342KB - Virtual size: 341KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 521KB - Virtual size: 530KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ