Static task
static1
Behavioral task
behavioral1
Sample
2d1fd9c3cd90c1ce2b547c885feba93f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d1fd9c3cd90c1ce2b547c885feba93f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d1fd9c3cd90c1ce2b547c885feba93f_JaffaCakes118
-
Size
332KB
-
MD5
2d1fd9c3cd90c1ce2b547c885feba93f
-
SHA1
0a36b94840371f90fa1e1fa9a26e6583bd8c55e8
-
SHA256
8c072d281ea0af19d69e39164576263e9f82ced15d36aa6d23e59064c103962a
-
SHA512
0349abcb45e4319260714e66e5f4e12bcff80281e04f046a9fbe511c73e4ac2aa3398b6aa2742be4d4467fb156375596c61e6a7616b149b03db1edeaf691542d
-
SSDEEP
6144:9JG/54VXYA5ndGZxSR1B3b20XdgwlZGI54nhBtpxzAJZx3+kplqlRpd:9JgUXYOndGZQ1pbjOm15ihM7upd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d1fd9c3cd90c1ce2b547c885feba93f_JaffaCakes118
Files
-
2d1fd9c3cd90c1ce2b547c885feba93f_JaffaCakes118.exe windows:4 windows x86 arch:x86
37a396cb0fe9f6288591aeaca1edc095
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
ExpandEnvironmentStringsW
CreateFileA
CreateDirectoryW
GetNumberFormatA
EscapeCommFunction
GetModuleFileNameW
MoveFileExA
LockFileEx
GetPrivateProfileSectionA
DefineDosDeviceA
GetFileAttributesExW
GetConsoleMode
GetPrivateProfileStringW
GlobalGetAtomNameW
OpenSemaphoreA
TlsGetValue
GetProfileStringA
GetLogicalDrives
GetProcessAffinityMask
GetSystemDefaultLangID
WriteConsoleW
GetCommState
SuspendThread
QueryPerformanceCounter
IsBadStringPtrW
GetTapeStatus
UnlockFile
_lwrite
GetSystemInfo
WriteConsoleOutputAttribute
WaitCommEvent
WriteTapemark
HeapFree
GetSystemTimeAdjustment
GlobalMemoryStatus
FatalAppExitA
WaitForMultipleObjectsEx
SetTapeParameters
GetCommTimeouts
MoveFileA
GetDiskFreeSpaceW
GetSystemDirectoryW
EnumSystemLocalesA
GetPrivateProfileIntW
ConvertThreadToFiber
GlobalCompact
GetOverlappedResult
LeaveCriticalSection
IsBadCodePtr
WriteConsoleOutputA
LoadLibraryExA
CopyFileExW
_lclose
SetConsoleWindowInfo
GetTapeParameters
OpenFileMappingA
SetTimeZoneInformation
FindNextFileW
IsValidLocale
GetVersionExA
LocalFree
GetBinaryTypeA
SetCommTimeouts
GetSystemTime
HeapSize
GetCPInfo
LCMapStringA
SetCommBreak
OpenEventA
GetProfileStringW
WaitForSingleObject
BackupWrite
GetLocalTime
SleepEx
DisconnectNamedPipe
GetStdHandle
GlobalUnlock
VirtualProtect
GetCommandLineA
CreateMailslotW
ExitProcess
user32
CreateWindowExW
GetShellWindow
SendDlgItemMessageA
CreateAcceleratorTableW
IsRectEmpty
SetClassLongA
WaitMessage
GetWindowTextLengthW
InsertMenuItemW
InflateRect
SystemParametersInfoW
PostThreadMessageA
ReleaseCapture
IsClipboardFormatAvailable
CreateDialogIndirectParamA
SetScrollRange
SwitchDesktop
GetKeyboardState
gdi32
CreateRectRgnIndirect
ExtTextOutW
SetWorldTransform
SetPaletteEntries
GetViewportExtEx
GetObjectA
GetMapMode
SetMetaFileBitsEx
DPtoLP
comdlg32
GetOpenFileNameW
advapi32
RegCreateKeyA
RegQueryInfoKeyW
CryptSetProvParam
InitializeSid
RegNotifyChangeKeyValue
ole32
CoRevokeMallocSpy
CoTaskMemAlloc
ReadClassStm
CoReleaseServerProcess
oleaut32
VariantInit
SysAllocString
VariantChangeTypeEx
QueryPathOfRegTypeLi
SysReAllocStringLen
SafeArrayAccessData
SafeArrayCreate
VariantCopy
comctl32
ImageList_LoadImageW
DestroyPropertySheetPage
ImageList_DragMove
ImageList_Duplicate
shlwapi
SHEnumValueW
StrChrIA
setupapi
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDescriptionW
SetupDiBuildDriverInfoList
SetupScanFileQueueA
SetupFindNextLine
SetupInstallFromInfSectionW
SetupOpenInfFileA
Sections
.text Size: 284KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE