Static task
static1
Behavioral task
behavioral1
Sample
2ecfc72db0eeef029775400737c37ddf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ecfc72db0eeef029775400737c37ddf_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2ecfc72db0eeef029775400737c37ddf_JaffaCakes118
-
Size
445KB
-
MD5
2ecfc72db0eeef029775400737c37ddf
-
SHA1
7c966ca6774eb1fe3caaf09893471ffb637cb44b
-
SHA256
c107de3bdc24dfb1dbd619ae7b5ca74c9cf53b74d3f3d7e4804bf793945fdb0f
-
SHA512
6912e3c378e9322bd88f576993897d37020ac588c9082c911f86cec37757e66d53d6355e6d18ed9c15b60a274867c1438f83490b58c8de8a8ff811c22edef79f
-
SSDEEP
12288:lVJq3SqaFlh/MAdqJdcaE2Yf4tZMlCu6Jpfaqnu0W:lVJq9O3DaKgtZU+u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ecfc72db0eeef029775400737c37ddf_JaffaCakes118
Files
-
2ecfc72db0eeef029775400737c37ddf_JaffaCakes118.exe windows:6 windows x86 arch:x86
dc7642e1fbc3e6fea12722b51e294b89
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
inet_ntoa
WSAGetLastError
WSACleanup
WSAStartup
gethostname
gethostbyname
socket
setsockopt
sendto
recvfrom
ntohs
htons
getsockname
ioctlsocket
bind
closesocket
inet_addr
comctl32
ord17
kernel32
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetCommandLineW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
CloseHandle
SetWaitableTimer
CreateWaitableTimerA
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ExitProcess
GetStdHandle
CreateThread
AllocConsole
SetConsoleMode
ReadConsoleA
SetConsoleCtrlHandler
FlushConsoleInputBuffer
SetConsoleTitleA
GetTickCount
GetLocalTime
TerminateThread
GetModuleHandleA
GetConsoleWindow
MulDiv
lstrlenA
GetCommandLineA
GetConsoleCP
ReadConsoleW
GetConsoleMode
WideCharToMultiByte
SetFilePointerEx
GetFileSizeEx
LCMapStringW
HeapReAlloc
HeapAlloc
HeapFree
WriteFile
GetModuleFileNameW
GetFileType
SetStdHandle
ReadFile
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
FreeLibrary
EncodePointer
GetLastError
RaiseException
FlushFileBuffers
RtlUnwind
TerminateProcess
GetCurrentProcess
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
CreateFileW
HeapSize
SetEndOfFile
WriteConsoleW
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
SetEvent
ResetEvent
WaitForSingleObjectEx
IsProcessorFeaturePresent
user32
SystemParametersInfoA
IsDialogMessageA
GetWindow
GetParent
GetWindowLongA
DrawFocusRect
MapWindowPoints
GetWindowTextLengthA
RedrawWindow
GetDC
GetKeyState
GetFocus
SetFocus
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
LoadIconA
LoadCursorA
GetWindowRect
GetClientRect
GetWindowTextA
EndPaint
BeginPaint
SetForegroundWindow
UpdateWindow
DrawTextA
GetDlgItem
ShowWindow
CreateWindowExA
RegisterClassExA
PostQuitMessage
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
DestroyWindow
UnregisterClassA
SetWindowTextA
SendMessageA
wsprintfA
MessageBoxA
ReleaseDC
gdi32
SetTextColor
SetBkColor
GetDeviceCaps
GetTextMetricsA
SelectObject
DeleteDC
CreateFontA
CreateCompatibleDC
DeleteObject
ExtTextOutA
Sections
.text Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 150KB - Virtual size: 823KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ