Static task
static1
Behavioral task
behavioral1
Sample
2c53eb1bb7e08443ec193fe87a12d54f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2c53eb1bb7e08443ec193fe87a12d54f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c53eb1bb7e08443ec193fe87a12d54f_JaffaCakes118
-
Size
324KB
-
MD5
2c53eb1bb7e08443ec193fe87a12d54f
-
SHA1
02112d68619af246bed571b575bc44bc7d7173fc
-
SHA256
928efe66a2837f1f2eb745eb80ea7799b80f2d053bd68f2b61d0d93d93a612d5
-
SHA512
089a3e3a73f790e61492a0c51c0ac8ec261d93a6db2c460915e0b8d11446ff266b7a578552ae810b1c7fd14e59f71b4c848749bada64deeae1249b28065052fb
-
SSDEEP
6144:mcsx5JcJGupaCPYk2MB+bW4llrqjHr6r64GWe7E3pNjwVw0bT65yTcY:JsG9aR4s/ll+rmyWHPj90X60Tf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c53eb1bb7e08443ec193fe87a12d54f_JaffaCakes118
Files
-
2c53eb1bb7e08443ec193fe87a12d54f_JaffaCakes118.exe windows:4 windows x86 arch:x86
3bc1ac75530f7d26b8137c32fa588f03
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClipboardOwner
UnregisterClassW
GetLastActivePopup
RegisterClassExA
ReuseDDElParam
DefDlgProcW
RegisterClassA
SetSystemCursor
GetWindowTextLengthW
MenuItemFromPoint
InsertMenuW
wininet
HttpAddRequestHeadersW
FindNextUrlCacheEntryExA
kernel32
RtlUnwind
IsDebuggerPresent
HeapSize
WideCharToMultiByte
SetStdHandle
GetCommandLineA
SetFilePointer
GetModuleFileNameA
FlushFileBuffers
GetPrivateProfileSectionA
GetProcessHeap
GetStartupInfoW
GetConsoleMode
GetModuleFileNameW
LocalLock
GetStartupInfoA
HeapAlloc
GetLocaleInfoA
VirtualQuery
UnhandledExceptionFilter
OpenMutexA
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
GetFullPathNameA
IsValidLocale
IsValidCodePage
GetLastError
GetCPInfo
HeapReAlloc
LeaveCriticalSection
WriteConsoleW
GetTickCount
SetEnvironmentVariableA
FormatMessageW
VirtualAlloc
GetFileType
FreeLibrary
CreateNamedPipeW
WriteConsoleA
LCMapStringA
GetCurrentThread
OpenMutexW
TlsGetValue
CompareStringW
TlsSetValue
GetEnvironmentStringsW
CreateFileA
SetLastError
SetConsoleCtrlHandler
ReadConsoleOutputAttribute
LCMapStringW
GetCurrentProcessId
GetVersionExA
GetPrivateProfileSectionW
TerminateProcess
SetSystemTime
GetLocaleInfoW
EnumSystemLocalesA
GetUserDefaultLCID
GetCurrentThreadId
WriteConsoleOutputA
CloseHandle
GetOEMCP
GetComputerNameA
ReadFile
HeapCreate
GetTimeFormatA
MultiByteToWideChar
Sleep
GetEnvironmentStrings
CompareStringA
EnterCriticalSection
GetSystemTimeAsFileTime
VirtualFree
GetCommandLineW
GetTimeZoneInformation
ExitProcess
QueryPerformanceCounter
GetCurrentProcess
CreateMutexA
LoadLibraryA
GetStdHandle
TlsAlloc
GetStringTypeA
GetDateFormatA
EnumResourceTypesW
WriteFile
TlsFree
FindResourceA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
InterlockedExchange
GetModuleHandleA
SetUnhandledExceptionFilter
GetACP
InterlockedDecrement
InterlockedIncrement
SetHandleCount
GetStringTypeW
GetFileSize
HeapFree
GetConsoleOutputCP
GetProcAddress
GetConsoleCP
comctl32
InitCommonControlsEx
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ