Static task
static1
Behavioral task
behavioral1
Sample
2ef4d636504537b862725cae38e6efc5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ef4d636504537b862725cae38e6efc5_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ef4d636504537b862725cae38e6efc5_JaffaCakes118
-
Size
334KB
-
MD5
2ef4d636504537b862725cae38e6efc5
-
SHA1
6133a611dbdc85bb5edb46112b93f1483673c048
-
SHA256
bd5c4be758d1b026715c773626131ec21d6988f093fa7a8f8d0e0cf6565bbdc0
-
SHA512
6f4291506b3e5b25b9f1fea28874a463cb9627af0dbbbd50e05788bc5693318de8ea9beea8c9ee977c59b939ccbd61b178885f620b8f22847c5c49f0d5532141
-
SSDEEP
6144:erbtflf6afX5HIO5LQKcGkZkn8v0Wg52RwvG2DlIc:stflf6aHR0NGkWIbY2SHDe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ef4d636504537b862725cae38e6efc5_JaffaCakes118
Files
-
2ef4d636504537b862725cae38e6efc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
8d79b09eb442c9c33bab187e18a1616d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetSetFilePointer
InternetQueryFortezzaStatus
InternetReadFileExA
InternetCombineUrlA
InternetSetOptionA
InternetWriteFile
FindNextUrlCacheEntryExA
kernel32
SetLastError
TlsAlloc
ReadFile
GetStdHandle
GetStartupInfoA
IsValidCodePage
EnumDateFormatsExW
GetLocaleInfoW
InterlockedDecrement
UnhandledExceptionFilter
WriteConsoleW
GetStringTypeA
VirtualFree
LCMapStringW
RtlUnwind
EnterCriticalSection
GetSystemTimeAsFileTime
GetEnvironmentStrings
InterlockedExchange
GetCurrentProcess
GetExitCodeThread
LeaveCriticalSection
TlsFree
SetConsoleCtrlHandler
GetCPInfo
GetModuleHandleW
VirtualQuery
TlsGetValue
GetDateFormatA
QueryPerformanceCounter
GetModuleFileNameA
TerminateProcess
GetACP
FreeEnvironmentStringsW
OpenMutexA
VirtualAllocEx
CreateMutexA
DeleteCriticalSection
GetTimeZoneInformation
SetEnvironmentVariableA
ExitProcess
FreeEnvironmentStringsA
GetCommandLineA
HeapFree
GetTickCount
EnumSystemLocalesA
GetLocaleInfoA
HeapAlloc
CloseHandle
FlushFileBuffers
IsDebuggerPresent
SetUnhandledExceptionFilter
GetTimeFormatA
CompareStringW
CreateFileA
GetCurrentProcessId
SetHandleCount
FindFirstFileW
HeapSize
GetModuleHandleA
GetCurrentThreadId
GetStringTypeW
GetOEMCP
InterlockedIncrement
WriteFile
GetConsoleOutputCP
SetStdHandle
FreeLibrary
Sleep
HeapReAlloc
WriteConsoleA
SetVolumeLabelA
GetFileType
IsValidLocale
DuplicateHandle
CompareStringA
SetFilePointer
GetConsoleCP
LoadLibraryA
GetTempFileNameW
HeapDestroy
WideCharToMultiByte
GetConsoleMode
MultiByteToWideChar
VirtualAlloc
GetUserDefaultLCID
GetEnvironmentStringsW
GetLocalTime
GetProcAddress
GetLastError
LCMapStringA
HeapCreate
InitializeCriticalSectionAndSpinCount
TlsSetValue
GetCurrentThread
gdi32
GetEnhMetaFileW
EnumFontFamiliesW
GetDeviceCaps
CreateICA
EnumFontFamiliesExW
DescribePixelFormat
GetCharWidthA
SetRectRgn
DeleteDC
PlgBlt
AbortDoc
comdlg32
GetFileTitleA
ReplaceTextW
ChooseFontA
comctl32
InitCommonControlsEx
shell32
ExtractIconExW
SHGetSpecialFolderPathA
ExtractIconEx
SHGetFileInfoA
SHInvokePrinterCommandW
user32
LoadBitmapA
RegisterClassExA
ShowCursor
CloseClipboard
DefMDIChildProcA
WINNLSGetIMEHotkey
LoadAcceleratorsA
EndMenu
GetClipboardOwner
PostMessageW
GetClipboardData
EnumDisplaySettingsA
CharPrevW
PostThreadMessageA
DialogBoxParamA
wsprintfA
RegisterClassA
CreateIconFromResourceEx
CreateCaret
Sections
.text Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ