Static task
static1
Behavioral task
behavioral1
Sample
2ed75f0a0accb05f486c8b5e5282b679_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ed75f0a0accb05f486c8b5e5282b679_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ed75f0a0accb05f486c8b5e5282b679_JaffaCakes118
-
Size
136KB
-
MD5
2ed75f0a0accb05f486c8b5e5282b679
-
SHA1
aacc675b0a0ff55199768a737b11e381b3fc83cc
-
SHA256
6877aff773ab52f4f83cdcfb74f9a40a05a71b71014722f7fd2ecd1d55ce08e0
-
SHA512
b9783b4eb72009182bc18ff042d3f47481ac33182c86cb70348d527a0c58d10f8ddb9b8b386f4f937b8d397c1bfa908ed8e821539e1aea225cd81328cc513484
-
SSDEEP
1536:3jneWW45OQqx0waTsCpzuseqP+1boK5OL408nxBQLZU3YfwBpC3A+oCSkcSwOr89:zdeRMpPg+K5U4A+xTIxoCAOI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ed75f0a0accb05f486c8b5e5282b679_JaffaCakes118
Files
-
2ed75f0a0accb05f486c8b5e5282b679_JaffaCakes118.exe windows:4 windows x86 arch:x86
77024c1e9d662db13037b265ce950b9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
GetVersion
CloseHandle
GetCurrentThreadId
GetProcAddress
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
GetProcessVersion
lstrcmpA
GlobalFlags
GetCPInfo
GetOEMCP
CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LocalReAlloc
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
HeapFree
HeapAlloc
RaiseException
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
DeleteFileA
TlsSetValue
GlobalAlloc
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpynA
SetLastError
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
LoadLibraryA
EnumResourceNamesA
FreeLibrary
FindResourceA
LoadResource
LockResource
SizeofResource
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
FindFirstFileA
FindNextFileA
Sleep
FindClose
GetTickCount
GetDriveTypeA
CreateProcessA
WaitForSingleObject
GetCurrentDirectoryA
GetCurrentProcess
GetLastError
GetTempPathA
CopyFileA
GetSystemDirectoryA
SetEndOfFile
user32
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
SetWindowTextA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
DestroyMenu
DrawTextA
GrayStringA
GetWindowTextA
GetDlgCtrlID
DestroyWindow
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
UnhookWindowsHookEx
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SendMessageA
MessageBoxA
EnableWindow
LoadStringA
GetDlgItem
TabbedTextOutA
PostQuitMessage
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
GetMessageA
DispatchMessageA
TranslateMessage
advapi32
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
comctl32
ord17
gdi32
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
TextOutA
GetStockObject
PtVisible
Escape
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
RectVisible
ExtTextOutA
ScaleWindowExtEx
CreateBitmap
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ