Static task
static1
Behavioral task
behavioral1
Sample
2dbeb6da79ef9f0da84f4423343bd07e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2dbeb6da79ef9f0da84f4423343bd07e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2dbeb6da79ef9f0da84f4423343bd07e_JaffaCakes118
-
Size
308KB
-
MD5
2dbeb6da79ef9f0da84f4423343bd07e
-
SHA1
ec2a74461b536d31e81e5cb56a77e3bfb9b2d010
-
SHA256
c8be94ca0ca1d6f367e5f6368b2f302419ea4189d297c34205fc93d0b9db120e
-
SHA512
eea6409c31ff2285ebe3e930620a9b43bb44a22082ff4b877d7cd8a3ceb5aab5c75e98c83c4cfefdf3c38c9c2435e8d802484fb4e24b9fcd2e076b20b6527936
-
SSDEEP
6144:JRJ7S0xgi7GB3V2qiLciLiZg6pYAwdmq77T4Ow5YK:JRdS0x+2qixLii6alS6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dbeb6da79ef9f0da84f4423343bd07e_JaffaCakes118
Files
-
2dbeb6da79ef9f0da84f4423343bd07e_JaffaCakes118.exe windows:4 windows x86 arch:x86
d72586f76a6eb2f2e6c98c8317912024
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidLocale
FreeLibrary
DeleteFiber
GlobalGetAtomNameW
SetThreadLocale
EraseTape
GetDateFormatA
SetNamedPipeHandleState
GetNumberFormatW
GetTickCount
WriteProcessMemory
IsProcessorFeaturePresent
GlobalReAlloc
GetPrivateProfileStringW
GetUserDefaultLCID
GetTapeStatus
CreateDirectoryA
FindCloseChangeNotification
FindFirstFileW
GetBinaryTypeA
GetWindowsDirectoryA
LeaveCriticalSection
_lopen
GetFileType
GetProfileIntA
IsBadReadPtr
GetDiskFreeSpaceW
WritePrivateProfileStructA
WritePrivateProfileSectionW
GetCommState
GetTempFileNameA
GetThreadContext
_lclose
MoveFileExA
CreateEventA
VirtualUnlock
FindResourceExA
CreateDirectoryW
FillConsoleOutputCharacterA
GetShortPathNameA
DebugBreak
VirtualFree
VirtualAllocEx
LoadLibraryExW
GetEnvironmentVariableW
FlushConsoleInputBuffer
SetConsoleCursorPosition
CloseHandle
OutputDebugStringW
VirtualProtect
GetVersionExA
GetLogicalDriveStringsA
SetFileTime
GlobalFree
EnumCalendarInfoA
GetLocaleInfoW
SetCommTimeouts
GetPrivateProfileSectionW
DeleteCriticalSection
lstrcmpiW
SetTimeZoneInformation
TryEnterCriticalSection
GlobalDeleteAtom
EnumSystemCodePagesA
GetSystemTimeAdjustment
IsBadWritePtr
_hread
SetLastError
SizeofResource
VirtualQueryEx
lstrcmpiA
SetProcessAffinityMask
CreatePipe
GlobalAddAtomA
LoadResource
WritePrivateProfileStringW
ExitProcess
GetCPInfo
RaiseException
VirtualQuery
CreateProcessA
RemoveDirectoryW
AllocConsole
CreateWaitableTimerA
GetCommandLineA
GetModuleFileNameW
lstrlenA
user32
GrayStringW
SetWindowWord
ArrangeIconicWindows
DialogBoxParamA
GetKeyboardState
ScrollWindow
LoadCursorW
GetDlgItemInt
SwitchToThisWindow
SendDlgItemMessageW
GetKeyboardType
SetWinEventHook
CheckDlgButton
GetIconInfo
GetCursorPos
SetParent
ShowWindow
InsertMenuA
CharToOemW
IsWindowVisible
SwitchDesktop
GetQueueStatus
GetWindowLongW
GetInputState
ReplyMessage
RemovePropA
VkKeyScanW
LoadBitmapA
DrawAnimatedRects
InternalGetWindowText
LoadMenuIndirectW
GetWindowTextA
GetClassNameW
IsCharLowerW
FindWindowW
EnumChildWindows
CharUpperBuffA
InsertMenuItemA
CreateCaret
ScrollWindowEx
GetClassInfoW
DrawIconEx
GetMenuItemRect
WinHelpA
GetNextDlgTabItem
GetThreadDesktop
CreateMDIWindowW
ChildWindowFromPointEx
GetSystemMenu
GetKeyNameTextA
PostQuitMessage
DrawTextA
EndMenu
SetMenuItemInfoW
MsgWaitForMultipleObjectsEx
DestroyCaret
MapWindowPoints
GetDC
gdi32
CreateEnhMetaFileW
SetWinMetaFileBits
SetMapMode
GetWindowExtEx
SetViewportExtEx
GetLayout
AddFontResourceA
GetFontLanguageInfo
comdlg32
GetFileTitleW
ChooseColorW
PrintDlgA
advapi32
CryptGetUserKey
RegCreateKeyExA
SetServiceStatus
SetSecurityDescriptorGroup
RegSetValueA
LogonUserW
AccessCheck
MakeSelfRelativeSD
RegSetKeySecurity
RegDeleteKeyW
CryptHashData
GetSecurityDescriptorLength
CryptGenKey
SetKernelObjectSecurity
CreateProcessAsUserA
RegisterServiceCtrlHandlerW
RegDeleteValueA
RegCloseKey
LogonUserA
SetSecurityInfo
NotifyChangeEventLog
CryptVerifySignatureA
SetFileSecurityA
shell32
ExtractIconA
ole32
CoMarshalInterface
CoGetClassObject
CoQueryProxyBlanket
StgCreateStorageEx
CoCreateInstanceEx
CoRegisterClassObject
OleSaveToStream
OleIsRunning
CoGetObject
ReadClassStg
oleaut32
SafeArrayPutElement
SysAllocStringLen
SysStringLen
SafeArrayUnaccessData
SysFreeString
SafeArrayGetElement
QueryPathOfRegTypeLi
LoadTypeLi
comctl32
ImageList_GetDragImage
ImageList_SetBkColor
shlwapi
PathUndecorateW
StrCmpIW
Sections
.text Size: 284KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE