Static task
static1
Behavioral task
behavioral1
Sample
2cecafecca660dc8089ed99511613e4a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2cecafecca660dc8089ed99511613e4a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cecafecca660dc8089ed99511613e4a_JaffaCakes118
-
Size
625KB
-
MD5
2cecafecca660dc8089ed99511613e4a
-
SHA1
f8786a3ee6f24a617d9c21a0f983af2746f580b6
-
SHA256
a4b0417eb272bf059e9eb326ff5cb5df89b66c271c0a2ef412dc8505da4514e2
-
SHA512
89f5694aca49ab9b30d84d06c3436e607e126e4db54411a5868459063f9cf3a91cde060cef2f55239ac79d682ad5584f71a39209796a16da2091c43f56eb2f16
-
SSDEEP
12288:EZSRPh30HAvFkrWUaHJxww7VRyRrUo3YFJYIMaFBalbLOHF+R:Si30GyCUoqgwgYqY1a+LOHF+R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cecafecca660dc8089ed99511613e4a_JaffaCakes118
Files
-
2cecafecca660dc8089ed99511613e4a_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b6a6bcec270425942e26f83d3c58c58
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDeviceGammaRamp
MaskBlt
GetCurrentObject
FlattenPath
SetMiterLimit
kernel32
CreateMutexA
EnterCriticalSection
GetProcAddress
CreateFileA
IsBadReadPtr
HeapDestroy
GetConsoleCP
GetStartupInfoW
WriteFile
GetCurrentProcessId
GetCommandLineW
ReadConsoleInputW
GetStartupInfoA
GetFileType
GetTickCount
SetUnhandledExceptionFilter
GetStdHandle
MapViewOfFile
InterlockedExchange
TlsGetValue
TlsSetValue
GetEnvironmentStringsA
SetHandleCount
GetCurrentProcess
HeapSize
OpenMutexA
IsDebuggerPresent
IsValidCodePage
SetConsoleCtrlHandler
ExitProcess
TlsAlloc
UnhandledExceptionFilter
GetCPInfo
Sleep
SetLastError
WriteConsoleA
GetCurrentThread
GetStringTypeW
SetFilePointer
GetACP
HeapAlloc
VirtualQuery
RtlUnwind
SetFileTime
WriteConsoleW
GetTimeFormatA
InterlockedDecrement
CloseHandle
EnumSystemLocalesA
GetLastError
LCMapStringA
GetShortPathNameW
CopyFileExA
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetSystemDefaultLCID
VirtualAlloc
VirtualFree
IsValidLocale
LoadLibraryA
DeleteCriticalSection
FindAtomA
FileTimeToLocalFileTime
CompareStringW
ReadFile
LCMapStringW
GetOEMCP
GetModuleHandleA
TerminateProcess
HeapFree
HeapCreate
SetEnvironmentVariableA
QueryPerformanceCounter
GetConsoleOutputCP
MoveFileA
LeaveCriticalSection
GetCurrentThreadId
CompareStringA
GetComputerNameW
GetModuleFileNameA
HeapReAlloc
LocalFlags
CreateEventW
GetLocaleInfoW
FlushFileBuffers
InterlockedIncrement
WideCharToMultiByte
GetDateFormatA
GetModuleFileNameW
GetConsoleCursorInfo
TlsFree
GetLocaleInfoA
GetStringTypeA
FreeEnvironmentStringsW
GetCommandLineA
GetModuleHandleW
GetTimeZoneInformation
MultiByteToWideChar
GetConsoleMode
SetStdHandle
GetEnvironmentStringsW
AddAtomW
GetSystemTimeAsFileTime
OpenFile
GetUserDefaultLCID
user32
WaitMessage
RegisterClassExA
RegisterClassA
EnumDesktopWindows
GetPriorityClipboardFormat
advapi32
InitiateSystemShutdownA
LookupPrivilegeNameA
LogonUserA
RegSaveKeyW
RegOpenKeyA
RegOpenKeyExW
RegRestoreKeyA
CryptSetProvParam
CryptSetProviderExW
ReportEventW
LookupPrivilegeValueW
RegEnumKeyExW
RegDeleteValueW
CryptExportKey
CryptAcquireContextA
CryptVerifySignatureW
shell32
SHGetDataFromIDListW
comctl32
ImageList_GetImageRect
CreateToolbarEx
ImageList_GetBkColor
DrawInsert
ImageList_DrawEx
ImageList_Read
CreateUpDownControl
_TrackMouseEvent
ImageList_SetImageCount
ImageList_Merge
CreateStatusWindowA
InitMUILanguage
ImageList_LoadImageW
InitCommonControlsEx
ImageList_LoadImage
CreateToolbar
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_AddMasked
ImageList_Draw
ImageList_SetOverlayImage
ImageList_Destroy
ImageList_Create
ImageList_Write
wininet
GopherFindFirstFileA
InternetCrackUrlW
InternetCanonicalizeUrlW
SetUrlCacheConfigInfoW
HttpQueryInfoW
GopherOpenFileA
InternetGetConnectedState
ReadUrlCacheEntryStream
InternetOpenUrlA
Sections
.text Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 208KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ