c:\tjfvhsss\eorjko\tgqf\hwe
Static task
static1
Behavioral task
behavioral1
Sample
2cc6aa3fcf54f89be91bf1a102b70575_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2cc6aa3fcf54f89be91bf1a102b70575_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cc6aa3fcf54f89be91bf1a102b70575_JaffaCakes118
-
Size
273KB
-
MD5
2cc6aa3fcf54f89be91bf1a102b70575
-
SHA1
09decd6b4bfb52117192fef03beaa3d7a6ecf3d3
-
SHA256
7dbec975d8fbded21abe3973004fb5cd17bdf1d2bd6a2c56303952e263f0ad69
-
SHA512
c385ef1f2408f1c42107e645b77d2db5c9939d1e14282cb84e299c28a066ed965f2f2f40cffdb779adbbb8e53b786b440c71e231779b025af39efa4ecab4e279
-
SSDEEP
6144:bSfpTVSqWmZKXPDvm3VmPiUkAtkHTMq8lcBN2G76:bSxoBmehiUkAtkzMryvN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cc6aa3fcf54f89be91bf1a102b70575_JaffaCakes118
Files
-
2cc6aa3fcf54f89be91bf1a102b70575_JaffaCakes118.exe windows:4 windows x86 arch:x86
2743b467132581d931f1ce1c0c590ec3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
FtpGetFileW
InternetCreateUrlA
ShowX509EncodedCertificate
user32
OemToCharBuffA
DefWindowProcA
CharPrevExA
TileWindows
DestroyWindow
MessageBoxW
RegisterClassExA
GetSubMenu
CreateWindowExW
DdeSetQualityOfService
GetCapture
BroadcastSystemMessage
GetPropA
GetUserObjectSecurity
GetForegroundWindow
SetParent
GetCaretPos
GetKeyNameTextW
GetCaretBlinkTime
RegisterClassA
GetKeyState
ShowWindow
GetMonitorInfoA
SetCursor
kernel32
HeapDestroy
TerminateProcess
GetCommandLineA
CompareStringA
EnterCriticalSection
VirtualQuery
GetDriveTypeW
GetLocalTime
VirtualFree
SetLastError
GetSystemTimeAsFileTime
InterlockedDecrement
UnhandledExceptionFilter
TlsGetValue
EnumResourceTypesA
ExitProcess
CompareStringW
TlsSetValue
QueryPerformanceCounter
HeapAlloc
InterlockedIncrement
SetFilePointer
GetStringTypeA
LCMapStringW
WriteFile
InitializeCriticalSection
lstrlen
LoadLibraryA
CommConfigDialogA
GetModuleFileNameA
GetFileType
CreateMutexA
GetModuleFileNameW
LoadLibraryW
LCMapStringA
GetSystemTime
GetTickCount
GetEnvironmentStrings
FreeEnvironmentStringsA
VirtualAlloc
GetCurrentProcess
OpenMutexA
GetProcAddress
GetCurrentThreadId
InterlockedExchange
GetCurrentProcessId
GetLastError
GetTimeZoneInformation
GetCPInfo
GetModuleHandleA
GetStartupInfoW
SetThreadLocale
GetStdHandle
CloseHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
MultiByteToWideChar
TlsFree
HeapReAlloc
GetStartupInfoA
IsBadWritePtr
GetCurrentThread
LeaveCriticalSection
WideCharToMultiByte
GetVersion
GetCommandLineW
LocalCompact
HeapCreate
SetHandleCount
HeapFree
GetEnvironmentStringsW
FlushFileBuffers
DeleteCriticalSection
GetStringTypeW
TlsAlloc
SetStdHandle
RtlUnwind
ReadFile
FindFirstFileExW
comdlg32
ChooseFontW
ChooseFontA
GetSaveFileNameW
comctl32
DrawStatusText
ImageList_DrawIndirect
ImageList_LoadImage
InitCommonControlsEx
GetEffectiveClientRect
DrawInsert
ImageList_DragEnter
CreateStatusWindowW
ImageList_DrawEx
ImageList_Replace
ImageList_GetIconSize
ImageList_Duplicate
ImageList_SetDragCursorImage
CreateStatusWindowA
ImageList_Create
gdi32
GetKerningPairsW
EnumEnhMetaFile
shell32
DuplicateIcon
DoEnvironmentSubstA
SHGetDiskFreeSpaceA
Sections
.text Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE