Static task
static1
Behavioral task
behavioral1
Sample
2d0d0da56c920fec28619685aeade88a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d0d0da56c920fec28619685aeade88a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d0d0da56c920fec28619685aeade88a_JaffaCakes118
-
Size
265KB
-
MD5
2d0d0da56c920fec28619685aeade88a
-
SHA1
3ebfac059a0b76ab638fabda9207e4a9cf3132fb
-
SHA256
1dcad472f9e5bb0fde5984c44830fe98e89d3b6bfab73f8a4c159a1b23543a6b
-
SHA512
26768657ee8d3b83a95b4217812e0d8b4e286c3755ce3108746c44f41d376d0c76c398f9c990e271ec1e9e24d07357bc49f46d02334de4c06f732091bc7d3607
-
SSDEEP
6144:3c+Sbnb19Pq//nfYluOtgyNKF5EKok5gDOK:uZdSH/OKyNA5TL5g6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d0d0da56c920fec28619685aeade88a_JaffaCakes118
Files
-
2d0d0da56c920fec28619685aeade88a_JaffaCakes118.exe windows:4 windows x86 arch:x86
85081c5b6013bb574b71cd70b86dae58
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
IsWindowVisible
DestroyMenu
SystemParametersInfoA
GetWindowDC
WaitMessage
SetWindowTextA
GetWindow
GetScrollPos
GetDC
LoadIconA
GetKeyboardLayoutList
MapVirtualKeyA
GetCursorPos
DispatchMessageW
ScrollWindow
IsWindowUnicode
SetFocus
CharNextW
CheckMenuItem
GetFocus
ShowWindow
RedrawWindow
IntersectRect
GetKeyboardLayoutNameA
GetTopWindow
PeekMessageA
GetKeyboardState
LoadCursorA
IsDialogMessageA
DrawFrameControl
EnableMenuItem
GetClassNameA
SetParent
GetClientRect
SetPropA
PostQuitMessage
BeginPaint
SendMessageA
PtInRect
DrawMenuBar
DeleteMenu
GetDCEx
SetWindowPos
SetMenuItemInfoA
CreateWindowExA
MapWindowPoints
SetMenu
MessageBoxA
FindWindowA
IsIconic
CreateIcon
InsertMenuItemA
GetKeyboardLayout
GetWindowThreadProcessId
UnregisterClassA
PeekMessageW
GetCapture
GetClipboardData
GetMenuState
GetIconInfo
GetWindowLongA
GetSysColorBrush
GetPropA
SetClassLongA
SetCursor
CharLowerA
GetClassInfoA
GetMenuItemID
wsprintfA
SetTimer
EnableScrollBar
IsDialogMessageW
InflateRect
UpdateWindow
GetMenuItemCount
DrawIconEx
GetWindowRect
SetScrollRange
ChildWindowFromPoint
DefMDIChildProcA
InvalidateRect
GetMenuItemInfoA
GetKeyState
InsertMenuA
IsChild
GetForegroundWindow
GetSystemMetrics
GetMessagePos
GetCursor
GetScrollInfo
GetParent
SetWindowsHookExA
kernel32
lstrcatA
SetHandleCount
SizeofResource
GetCommandLineW
SetEndOfFile
MulDiv
lstrlenA
IsBadReadPtr
GetOEMCP
MoveFileA
LocalReAlloc
SetFilePointer
GetModuleHandleA
ExitThread
LoadLibraryA
LocalAlloc
WaitForSingleObject
lstrlenW
SetLastError
lstrcpynA
GetModuleHandleW
lstrcmpiA
VirtualQuery
ReadFile
LocalFree
IsBadHugeReadPtr
SetEvent
GetCommandLineA
VirtualFree
ExitProcess
WideCharToMultiByte
VirtualAlloc
ResetEvent
GetProcAddress
GetLastError
gdi32
CreateDIBitmap
GetCurrentPositionEx
CopyEnhMetaFileA
BitBlt
CreateDIBSection
CreateBitmap
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES20 Size: 1024B - Virtual size: 546B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES03 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES89 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES45 Size: 512B - Virtual size: 467B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES62 Size: 512B - Virtual size: 314B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES79 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES67 Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES25 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ