Static task
static1
Behavioral task
behavioral1
Sample
2fde6ce7eecc3d68ed9062df59a1de18_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fde6ce7eecc3d68ed9062df59a1de18_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fde6ce7eecc3d68ed9062df59a1de18_JaffaCakes118
-
Size
521KB
-
MD5
2fde6ce7eecc3d68ed9062df59a1de18
-
SHA1
7baa40cf0b22953f38129b258955110005fe625c
-
SHA256
1dfad7dabc4fcb4f5d4f8f6f5fc328c78e2fbcb14ffdf38740128fcef4092d0a
-
SHA512
7881938606aa7e78ec9f1171918baba1afa271a5f2481a88d03f03cae71b7a4e53ed829207dfe728d20e68cff7f6aafa0f72049907c4b93063911e405ed2b92c
-
SSDEEP
12288:n+3epY8OVwjUYrVuPEYB1QWaCaUnKHEb7VOdexfTi:n+3epY8j9JYhwHCJ++B4qfT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fde6ce7eecc3d68ed9062df59a1de18_JaffaCakes118
Files
-
2fde6ce7eecc3d68ed9062df59a1de18_JaffaCakes118.exe windows:4 windows x86 arch:x86
94a100ed708a34ab0ddc34b9002f3e96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
GetUrlCacheConfigInfoW
InternetShowSecurityInfoByURL
InternetReadFileExA
InternetAutodialHangup
FindFirstUrlCacheEntryW
kernel32
GetCurrentProcessId
WriteFile
GetFileType
LocalLock
GetProcAddress
SetFileTime
IsBadReadPtr
LeaveCriticalSection
GetCurrentThread
GetStringTypeW
GetTimeFormatA
GetStdHandle
EnumSystemLocalesA
Sleep
GetStartupInfoW
GetConsoleOutputCP
ReadConsoleOutputAttribute
GetOEMCP
GetEnvironmentVariableW
HeapFree
LCMapStringW
SetFilePointer
CreateFileA
GetVolumeInformationA
GetSystemTimeAsFileTime
GetCPInfo
TlsSetValue
HeapDestroy
FlushFileBuffers
EnumResourceLanguagesA
WideCharToMultiByte
GlobalAlloc
GetLocaleInfoA
TlsAlloc
GetDiskFreeSpaceA
HeapAlloc
GetModuleHandleA
ExitProcess
QueryPerformanceCounter
FreeLibrary
WriteConsoleW
InterlockedExchange
HeapReAlloc
SetStdHandle
WriteProfileSectionW
GetLastError
InterlockedDecrement
CompareStringW
GetModuleFileNameW
VirtualFreeEx
GetVersionExA
FreeEnvironmentStringsW
GetModuleFileNameA
GetEnvironmentStringsW
GetCurrentThreadId
HeapCreate
LoadLibraryA
SetHandleCount
LCMapStringA
RtlUnwind
FindFirstFileA
InterlockedIncrement
EnumResourceNamesA
ReadFile
GetCurrentDirectoryW
GetCurrentProcess
UnhandledExceptionFilter
GetStringTypeA
ContinueDebugEvent
TerminateProcess
SetLastError
CompareStringA
HeapSize
SetConsoleCtrlHandler
GetUserDefaultLCID
IsValidLocale
OpenMutexW
GetCompressedFileSizeW
FillConsoleOutputAttribute
VirtualFree
IsValidCodePage
GetTickCount
EnterCriticalSection
FormatMessageW
GetTimeZoneInformation
GetCommandLineW
SetEnvironmentVariableA
TlsFree
GetProcessHeap
CreateMutexA
GetLocaleInfoW
OpenMutexA
GetConsoleCP
GetCommandLineA
GetConsoleMode
CloseHandle
IsDebuggerPresent
VirtualQuery
SetUnhandledExceptionFilter
GetACP
FreeEnvironmentStringsA
WritePrivateProfileSectionW
DeleteCriticalSection
MultiByteToWideChar
GetDateFormatA
InitializeCriticalSection
WriteConsoleA
GetStartupInfoA
SetLocaleInfoA
CreatePipe
TlsGetValue
VirtualAlloc
GetEnvironmentStrings
gdi32
PolyBezierTo
CreateColorSpaceW
UpdateICMRegKeyW
StrokePath
GetTextMetricsW
GetOutlineTextMetricsW
FlattenPath
ExtSelectClipRgn
StartPage
GetPixelFormat
user32
DestroyAcceleratorTable
MonitorFromWindow
MessageBoxIndirectW
GetCaretBlinkTime
GetWindowWord
GetMenuItemID
LoadIconW
CreateAcceleratorTableW
GetClassLongW
CascadeChildWindows
RegisterClassExA
MapVirtualKeyExA
CreateIconFromResource
RegisterClassW
RegisterClassA
comctl32
InitCommonControlsEx
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ