Static task
static1
Behavioral task
behavioral1
Sample
2ebdf406881043721159dc913e3ce3da_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ebdf406881043721159dc913e3ce3da_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2ebdf406881043721159dc913e3ce3da_JaffaCakes118
-
Size
656KB
-
MD5
2ebdf406881043721159dc913e3ce3da
-
SHA1
c14962310f98890952d774d128d817580e466a37
-
SHA256
b488a41ce5b06f7800c6633048e1ae5867a7b82795bf1a0ce919467ce14300dd
-
SHA512
05f9b9699a53873960e200c9269295a279064105f54c4dfc6f677506f66766999c4b05cace217b6c3bff27ae96d1ed921f9cf6192b98043d0e6b271941a4dfea
-
SSDEEP
12288:x8JR/Z6GFt7aLvIKXwiQqrcktEn/bSqF/Vz:x8JRxexfrc8ouqF/d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ebdf406881043721159dc913e3ce3da_JaffaCakes118
Files
-
2ebdf406881043721159dc913e3ce3da_JaffaCakes118.exe windows:4 windows x86 arch:x86
b04eb6c0c6cf019c314e6d44f3f3ed33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetPrivateProfileSectionNamesW
GetCommandLineA
GetLocaleInfoW
EnterCriticalSection
HeapFree
WideCharToMultiByte
ReadConsoleOutputAttribute
WriteFile
OpenMutexW
SetEnvironmentVariableA
GetLastError
DeleteFiber
GetLocaleInfoA
InterlockedIncrement
InterlockedDecrement
WriteConsoleW
WriteConsoleA
GetPrivateProfileSectionNamesA
CreateDirectoryW
GetTickCount
TlsGetValue
EnumSystemCodePagesA
OpenWaitableTimerW
TlsAlloc
GetPriorityClass
IsValidLocale
HeapSize
SetHandleCount
GetModuleFileNameW
CloseHandle
SetLocalTime
EnumResourceNamesA
CompareStringA
SetConsoleCtrlHandler
FileTimeToLocalFileTime
OpenMutexA
DeleteCriticalSection
MultiByteToWideChar
GetSystemTimeAdjustment
GetEnvironmentStringsA
EnumSystemLocalesA
LCMapStringA
SetConsoleTitleA
QueryPerformanceCounter
LCMapStringW
MoveFileW
GetProcAddress
TerminateProcess
HeapAlloc
ContinueDebugEvent
SetFileAttributesW
GetFileType
GetOEMCP
WritePrivateProfileSectionW
ReadConsoleOutputA
IsValidCodePage
GetModuleFileNameA
InterlockedExchange
IsDebuggerPresent
VirtualQuery
EnumTimeFormatsW
GetModuleHandleA
ResumeThread
GetProcessHeap
CreateFileA
GetStringTypeA
FreeEnvironmentStringsA
ReadConsoleOutputCharacterA
RtlUnwind
GetConsoleTitleA
SetCurrentDirectoryA
SetStdHandle
GetCurrentThread
FreeLibrary
HeapReAlloc
TransactNamedPipe
SetThreadContext
VirtualFree
GetTimeZoneInformation
GetConsoleOutputCP
GetVersionExA
GetConsoleMode
TlsFree
HeapDestroy
ReadConsoleOutputCharacterW
GetProcessHeaps
GlobalReAlloc
SetUnhandledExceptionFilter
GetCurrentProcess
CreateMutexA
LoadLibraryA
HeapCreate
ExitProcess
Sleep
GetStringTypeW
FreeEnvironmentStringsW
GetCurrentThreadId
SetFilePointer
VirtualAlloc
VirtualLock
LeaveCriticalSection
ConnectNamedPipe
UnlockFile
WriteProfileSectionW
OutputDebugStringW
GetCPInfo
GetComputerNameW
GetConsoleCP
GetSystemTimeAsFileTime
GetACP
EnumCalendarInfoExA
lstrcatW
FindFirstFileW
GetProcessShutdownParameters
GetThreadContext
CompareStringW
GetAtomNameW
GetStartupInfoA
GetCurrentProcessId
GetCalendarInfoW
WritePrivateProfileStructA
WriteFileEx
GetLogicalDriveStringsA
UnhandledExceptionFilter
GetStdHandle
WritePrivateProfileSectionA
FlushFileBuffers
GetConsoleCursorInfo
GetPrivateProfileStringA
GetDateFormatA
GetCommandLineW
FillConsoleOutputAttribute
GetUserDefaultLCID
GetTempPathA
GetTimeFormatA
GlobalAddAtomA
RtlMoveMemory
GetEnvironmentStringsW
GetEnvironmentStrings
GetLongPathNameW
InitializeCriticalSection
SetLastError
TlsSetValue
GetStartupInfoW
comdlg32
ReplaceTextA
ReplaceTextW
user32
CallMsgFilter
SetClassLongA
GetShellWindow
ToUnicodeEx
MenuItemFromPoint
CharPrevA
IsCharLowerW
SetScrollInfo
EndDeferWindowPos
GetMessageA
DdeInitializeW
GetMonitorInfoW
SendDlgItemMessageW
EnumDisplayMonitors
PeekMessageW
ShowWindow
SetPropA
LoadIconW
GetInputDesktop
CreateWindowExW
GetClassInfoExA
CopyIcon
GetClassLongA
MessageBoxA
DdeInitializeA
RegisterClassA
ExcludeUpdateRgn
AdjustWindowRectEx
ScrollDC
OpenDesktopW
MessageBoxW
GetClientRect
DestroyWindow
GetClassInfoW
SetWindowPlacement
SwitchDesktop
GetProcessDefaultLayout
DdeAccessData
GetClipboardSequenceNumber
GetWindowModuleFileNameW
ValidateRgn
SetPropW
PaintDesktop
CreateWindowExA
GetParent
RealGetWindowClass
SetWindowTextW
IsCharLowerA
GetSubMenu
DestroyCursor
RegisterWindowMessageA
DdeNameService
SetThreadDesktop
DefWindowProcA
GetThreadDesktop
ChangeClipboardChain
RegisterClassExA
GetCaretBlinkTime
InSendMessageEx
DdeSetQualityOfService
GetGUIThreadInfo
PostThreadMessageA
AdjustWindowRect
RegisterWindowMessageW
GetDialogBaseUnits
TrackPopupMenu
wininet
LoadUrlCacheContent
InternetGetConnectedStateExA
FtpOpenFileW
InternetOpenW
comctl32
ImageList_ReplaceIcon
CreateMappedBitmap
ImageList_SetDragCursorImage
ImageList_Copy
MakeDragList
InitCommonControlsEx
ImageList_EndDrag
ImageList_GetImageRect
CreateStatusWindowA
ImageList_GetFlags
CreatePropertySheetPage
ImageList_DragLeave
InitMUILanguage
CreateStatusWindow
CreateStatusWindowW
ImageList_SetFilter
ImageList_Read
ImageList_SetImageCount
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetDragImage
Sections
.text Size: 224KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ