Static task
static1
Behavioral task
behavioral1
Sample
2cd32df3013fd313a7dcb1615f9d5788_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2cd32df3013fd313a7dcb1615f9d5788_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cd32df3013fd313a7dcb1615f9d5788_JaffaCakes118
-
Size
528KB
-
MD5
2cd32df3013fd313a7dcb1615f9d5788
-
SHA1
e925fdecd9abfe177f62a1c9f4af98b9bce8fce2
-
SHA256
28343cb5fe4e4ee01527c61242518ef4bca3dd80772dfbc0caefa0d85ee7ec2a
-
SHA512
4effbbf5e38d96b01db4563385649782405c4067cab71537f80bcdc2d9f2be4664f7689587556fc3c67f34453f6f3535063a02b7279913f051d86e94da7acb1d
-
SSDEEP
12288:tLMeLxC0b5J1JvT2KfETXIHzipBgGuxZWs9va3wdJmKSsPd:tLMeLxt1JvT2KfEkTcBgZWs9vaMSod
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cd32df3013fd313a7dcb1615f9d5788_JaffaCakes118
Files
-
2cd32df3013fd313a7dcb1615f9d5788_JaffaCakes118.exe windows:4 windows x86 arch:x86
2b678730826decaeb4d5ee3598a79328
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
unrar
ord1
ord2
ord4
ord3
kernel32
TerminateProcess
HeapSize
GetACP
GetTimeZoneInformation
HeapReAlloc
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetUnhandledExceptionFilter
LCMapStringA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
HeapAlloc
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
ExitProcess
HeapFree
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrlenA
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
GetProfileStringA
RaiseException
GetCommandLineA
GetStartupInfoA
RtlUnwind
Sleep
FindNextFileA
SetErrorMode
GetCurrentDirectoryA
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFileTimeToFileTime
SetFileAttributesA
SystemTimeToFileTime
GetThreadLocale
GetFileSize
GetShortPathNameA
FindFirstFileA
GetStringTypeExA
GetVolumeInformationA
MoveFileA
FindClose
DeleteFileA
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
ReadFile
CreateFileA
GetOEMCP
DuplicateHandle
SizeofResource
TlsGetValue
GetCPInfo
GlobalFlags
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
GlobalHandle
DeleteCriticalSection
GetProcessVersion
InitializeCriticalSection
LocalAlloc
WritePrivateProfileStringA
lstrlenW
GetTickCount
GlobalAlloc
GetPrivateProfileStringA
GetPrivateProfileIntA
MulDiv
lstrcmpA
GetCurrentThread
LocalFree
SetLastError
GetFileTime
GetLastError
GetDiskFreeSpaceA
GetTempFileNameA
SetFileTime
GetFullPathNameA
GlobalLock
GetFileAttributesA
lstrcpynA
GlobalUnlock
GlobalFree
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
GetEnvironmentStrings
user32
SetRect
PostQuitMessage
ShowOwnedPopups
RegisterClipboardFormatA
WindowFromPoint
GrayStringA
LoadStringA
GetClassNameA
FindWindowA
FillRect
InvertRect
GetDCEx
GetSysColorBrush
LockWindowUpdate
InsertMenuA
GetMenuStringA
DestroyIcon
PostThreadMessageA
GetCursorPos
GetDC
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
CharUpperA
GetNextDlgTabItem
EnableMenuItem
ShowWindow
SetWindowTextA
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
SetFocus
ScreenToClient
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
IsWindowEnabled
TabbedTextOutA
DrawTextA
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetSystemMenu
AppendMenuA
IsRectEmpty
SetParent
DestroyCursor
SetCursorPos
PtInRect
ClientToScreen
GetWindowPlacement
GetWindowRect
GetDlgCtrlID
GetParent
IsIconic
IsChild
InvalidateRect
AdjustWindowRectEx
OemToCharA
GetMenu
DeleteMenu
UpdateWindow
DrawMenuBar
KillTimer
LoadImageA
EndPaint
BeginPaint
GetWindowDC
InflateRect
SetCapture
LoadBitmapA
GetSystemMetrics
LoadCursorA
SetTimer
OemToCharBuffA
GetFocus
EnableWindow
PostMessageA
SendMessageA
CharToOemA
RedrawWindow
UnpackDDElParam
IsZoomed
BringWindowToTop
LoadMenuA
ReuseDDElParam
SetMenu
SetCursor
DestroyMenu
GetDesktopWindow
LoadAcceleratorsA
ReleaseCapture
TranslateAcceleratorA
CreateDialogIndirectParamA
SetRectEmpty
EndDialog
GetActiveWindow
GetMessageA
TranslateMessage
GetScrollPos
ValidateRect
SetScrollPos
IsWindow
SetActiveWindow
ReleaseDC
HideCaret
ShowCaret
UnregisterClassA
DrawFocusRect
DefDlgProcA
ExcludeUpdateRgn
IsWindowUnicode
CharNextA
gdi32
GetTextExtentPointA
CreateCompatibleDC
CreateDIBitmap
SetBkColor
CreateBitmap
SetTextColor
CreateRectRgnIndirect
GetTextExtentPoint32A
PatBlt
GetTextMetricsA
DeleteDC
SelectObject
CreateCompatibleBitmap
DeleteObject
StretchDIBits
CreateFontA
GetCharWidthA
RestoreDC
SaveDC
SetBkMode
GetObjectA
GetStockObject
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
SelectClipRgn
SetTextAlign
CreateRectRgn
GetDeviceCaps
CreatePatternBrush
CreateSolidBrush
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
SetRectRgn
CombineRgn
CreateFontIndirectA
BitBlt
GetClipBox
comdlg32
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegSetValueExA
RegEnumKeyA
SetFileSecurityA
RegCreateKeyA
GetFileSecurityA
RegQueryValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
shell32
SHGetFileInfoA
DragQueryFileA
DragFinish
ExtractIconA
ShellExecuteA
comctl32
ImageList_Destroy
ord17
ImageList_LoadImageA
oledlg
ord8
ole32
CoDisconnectObject
StringFromCLSID
OleFlushClipboard
CoRegisterMessageFilter
CoRegisterClassObject
OleIsCurrentClipboard
CoTaskMemAlloc
OleInitialize
CoRevokeClassObject
CoTaskMemFree
CoFreeUnusedLibraries
OleUninitialize
oleaut32
VariantCopy
LoadTypeLi
SysFreeString
SysStringByteLen
VariantChangeType
SysAllocStringLen
VariantClear
SysAllocString
SysStringLen
SysAllocStringByteLen
Sections
.text Size: 268KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ