Static task
static1
Behavioral task
behavioral1
Sample
2f6a0ccc30a5bf375a0f6275c2372349_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f6a0ccc30a5bf375a0f6275c2372349_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f6a0ccc30a5bf375a0f6275c2372349_JaffaCakes118
-
Size
307KB
-
MD5
2f6a0ccc30a5bf375a0f6275c2372349
-
SHA1
57efb39baf1fd8e1df40fb863ce261cd5f19fbd6
-
SHA256
49ae779b99b3f50f43b7241a0333f74292c620690462375a04c5fe1b7b029d61
-
SHA512
bacdb264015446696a784b799e656441f79927b75bf471bfdda826dfd3025e818a0c796ee5c5ab9b287afc54a2b7e4f2696dc16735c7edd6cb44845e5acaeaa2
-
SSDEEP
6144:dRmCv67a1gywEe6gIjcryn4mW0muNWG+ts72chyuKOthL66Ysxv:/mCZ13w7IjUynjW0muL+iJyuKKd9Y8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f6a0ccc30a5bf375a0f6275c2372349_JaffaCakes118
Files
-
2f6a0ccc30a5bf375a0f6275c2372349_JaffaCakes118.exe windows:4 windows x86 arch:x86
46b084a5ba80f115bae722ca130a2488
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
DrawStatusTextW
CreateMappedBitmap
ImageList_GetBkColor
ImageList_DrawEx
ImageList_EndDrag
ImageList_DragLeave
ImageList_GetIconSize
ImageList_DrawIndirect
ImageList_GetImageRect
ImageList_GetImageCount
ImageList_Copy
_TrackMouseEvent
CreateStatusWindow
ImageList_ReplaceIcon
ImageList_Write
GetEffectiveClientRect
ImageList_Draw
ImageList_GetIcon
InitCommonControlsEx
ImageList_SetImageCount
ImageList_GetFlags
ImageList_DragShowNolock
DestroyPropertySheetPage
CreatePropertySheetPageW
user32
GrayStringW
SystemParametersInfoA
OpenDesktopW
ShowWindow
UnhookWindowsHook
SwapMouseButton
BeginPaint
SetWindowLongW
GetUserObjectSecurity
LookupIconIdFromDirectoryEx
HideCaret
SetFocus
CallMsgFilterW
InflateRect
GetMenuStringA
SetClipboardViewer
CreateWindowExW
CharUpperBuffW
InsertMenuItemA
DrawTextW
DefWindowProcW
MenuItemFromPoint
GetKeyState
KillTimer
DispatchMessageA
InsertMenuA
GetSysColorBrush
GetWindowWord
EnumThreadWindows
DdeCreateStringHandleW
MessageBoxW
CharToOemBuffA
IsMenu
MessageBoxIndirectW
GetClipboardFormatNameW
CreateCaret
EnableMenuItem
DestroyWindow
SetWindowPlacement
ClipCursor
GetMessageA
RegisterClassExA
RegisterClassA
PostMessageW
SendNotifyMessageA
GetNextDlgTabItem
GetMenuItemID
DrawTextA
SetClassWord
PackDDElParam
SetProcessWindowStation
IsZoomed
GetWindowTextLengthA
SwitchDesktop
EndMenu
GetDlgItemTextW
GetKeyboardType
DrawAnimatedRects
CharNextExA
wsprintfA
CascadeChildWindows
wvsprintfA
GetClassInfoExA
GetAsyncKeyState
kernel32
HeapLock
CompareStringW
GetSystemTimeAsFileTime
SetHandleCount
OpenEventW
CreateEventA
GetTimeZoneInformation
SetLocaleInfoW
HeapFree
GetSystemTime
ReadFile
UnhandledExceptionFilter
GetWindowsDirectoryA
GetModuleHandleA
GetPriorityClass
GetDateFormatW
VirtualQuery
GetCurrentThreadId
GetEnvironmentStringsW
MultiByteToWideChar
InterlockedDecrement
InitializeCriticalSection
GetEnvironmentStrings
GetEnvironmentVariableW
HeapAlloc
LeaveCriticalSection
VirtualLock
VirtualAlloc
TlsFree
EnterCriticalSection
GetFileType
ExitProcess
CreateMailslotW
GetLogicalDrives
LoadResource
FreeEnvironmentStringsW
GetProcessHeap
GetCommandLineA
GetProfileStringA
FillConsoleOutputCharacterW
GetCurrentProcess
InterlockedIncrement
GetStdHandle
FreeEnvironmentStringsA
GetModuleFileNameW
GetStringTypeA
GetShortPathNameA
TlsGetValue
LCMapStringW
GetProcAddress
GetVersion
GlobalAddAtomW
CreateMutexA
OpenFileMappingA
GetCurrentProcessId
TerminateProcess
SetEnvironmentVariableA
SetFilePointer
FindClose
GetCPInfo
GetLocaleInfoA
QueryPerformanceCounter
GetCurrentThread
LoadLibraryA
InterlockedExchange
GetProcAddress
HeapDestroy
GetDiskFreeSpaceA
RtlUnwind
GetModuleFileNameA
ExpandEnvironmentStringsW
AddAtomW
EnumDateFormatsW
SetStdHandle
FlushFileBuffers
CompareStringA
GlobalUnlock
GetStartupInfoA
VirtualFree
GetThreadTimes
UnlockFileEx
GetStringTypeW
EnumSystemCodePagesA
GetStartupInfoW
DeleteCriticalSection
WideCharToMultiByte
GetProcessShutdownParameters
TlsSetValue
IsBadWritePtr
GetConsoleTitleW
HeapCreate
GetCommandLineW
SleepEx
GetTickCount
HeapReAlloc
SetUnhandledExceptionFilter
lstrcatW
SetLastError
OpenMutexA
lstrlenW
GetOEMCP
WaitForSingleObjectEx
LCMapStringA
SetConsoleScreenBufferSize
OpenWaitableTimerW
GetProcessAffinityMask
ReadConsoleOutputCharacterW
GetLocalTime
WriteFile
GetLastError
TlsAlloc
CloseHandle
Sections
.text Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ