Static task
static1
Behavioral task
behavioral1
Sample
2dcc589cde06aa1b5058749e5eef0095_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2dcc589cde06aa1b5058749e5eef0095_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2dcc589cde06aa1b5058749e5eef0095_JaffaCakes118
-
Size
501KB
-
MD5
2dcc589cde06aa1b5058749e5eef0095
-
SHA1
2d9a39118499e61ef6e60cde9173577f1d388e29
-
SHA256
324a3a45cefe8cd95277bc9a7bda2927b66546031b284ce7688fcaef7d33ba56
-
SHA512
1c19416410af44779e66d6e2ea3abaaa66efba76e973bf427f00ff54a622185ef17b314402e93817df541d9ece477c58776864c1d6db1aaa0d7180b85add966a
-
SSDEEP
12288:LwR5n1RK5zeGOOLeyza5W7ep2pi6kQCKycYd/FT:LwPKB+OLja572cDVd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dcc589cde06aa1b5058749e5eef0095_JaffaCakes118
Files
-
2dcc589cde06aa1b5058749e5eef0095_JaffaCakes118.exe windows:4 windows x86 arch:x86
7e4ff526eb53e98698a5ea317eb9e3df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
TlsFree
Sleep
FreeEnvironmentStringsW
OpenFileMappingA
WideCharToMultiByte
IsValidCodePage
InterlockedDecrement
SetFilePointer
GetExitCodeProcess
GetTimeFormatA
LCMapStringA
GlobalReAlloc
SetHandleCount
HeapDestroy
InterlockedIncrement
LeaveCriticalSection
GetModuleHandleW
TlsSetValue
HeapSize
GetUserDefaultLCID
LoadLibraryA
DeleteCriticalSection
GetEnvironmentStrings
TlsAlloc
CloseHandle
HeapCreate
GetCurrentProcessId
GetModuleFileNameA
GetTimeZoneInformation
OpenMutexA
SetStdHandle
GetCurrentThreadId
GetConsoleOutputCP
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetOEMCP
SetUnhandledExceptionFilter
GetLocaleInfoA
GetCommandLineA
IsValidLocale
GetStdHandle
GetCurrentProcess
SetEnvironmentVariableA
GetEnvironmentStringsW
VirtualAlloc
GetACP
CompareStringA
CompareStringW
CreateFileA
VirtualFree
GetSystemTimeAsFileTime
GetLastError
MultiByteToWideChar
EnterCriticalSection
CreateFileMappingW
EnumSystemLocalesA
CompareFileTime
HeapFree
GetCurrentThread
GetConsoleMode
GetFileType
RtlUnwind
GetComputerNameW
FreeEnvironmentStringsA
GetTickCount
VirtualQuery
IsDebuggerPresent
CreateMutexA
FlushFileBuffers
UnhandledExceptionFilter
HeapAlloc
WriteConsoleW
ExitProcess
TlsGetValue
TerminateProcess
QueryPerformanceCounter
WriteConsoleA
GetCPInfo
FindAtomW
GetConsoleCP
SetLastError
GetProfileStringA
GetModuleHandleA
FreeLibrary
GetLocaleInfoW
GetStringTypeA
LCMapStringW
GetEnvironmentStringsA
LocalCompact
ReadFile
InterlockedExchange
HeapReAlloc
GetStartupInfoA
WriteFile
GetDateFormatA
GetProcAddress
SetConsoleCtrlHandler
comctl32
ImageList_SetImageCount
CreateToolbar
ImageList_Write
ImageList_Read
ImageList_Replace
ImageList_GetBkColor
InitMUILanguage
ImageList_GetIconSize
ImageList_Copy
GetEffectiveClientRect
ImageList_ReplaceIcon
ImageList_DrawIndirect
CreatePropertySheetPageA
ImageList_DrawEx
ImageList_AddIcon
MakeDragList
ImageList_DragLeave
CreateStatusWindow
ImageList_DragMove
ImageList_Destroy
InitCommonControlsEx
ImageList_SetFilter
ImageList_Add
DrawStatusTextA
ImageList_LoadImage
wininet
CreateUrlCacheContainerA
comdlg32
PageSetupDlgW
PageSetupDlgA
GetFileTitleA
LoadAlterBitmap
user32
MessageBoxW
DdeDisconnect
ShowWindow
CloseWindowStation
FillRect
CreateWindowExW
ReplyMessage
RegisterClassA
DlgDirSelectComboBoxExW
RegisterClassExA
EnumDesktopWindows
ShowWindowAsync
shell32
DoEnvironmentSubstA
Sections
.text Size: 329KB - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ