Static task
static1
Behavioral task
behavioral1
Sample
2cae3189358ca07e14c9830f87cab7a5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2cae3189358ca07e14c9830f87cab7a5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2cae3189358ca07e14c9830f87cab7a5_JaffaCakes118
-
Size
204KB
-
MD5
2cae3189358ca07e14c9830f87cab7a5
-
SHA1
997ed022be32f87b8bd86450790f065211d0334f
-
SHA256
c1610d5d46b9672ce057caf0d8c648663daba8dec619f525a422e9c76bedeb67
-
SHA512
e895608ac3dfd20cbe10c3074dfdb572db1d688f760e64259d00b56e83f86894f9243192fb649f90a99af019cfb0404b0c4e4148d989263c26fa2db2bdac3ffb
-
SSDEEP
3072:bBA5n76/++TuRsFOWLrS3yBBLCUXcLGXYWvgYtMw4SWr+A:QoVLhrnoUMwxd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cae3189358ca07e14c9830f87cab7a5_JaffaCakes118
Files
-
2cae3189358ca07e14c9830f87cab7a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
8a54f5eb76bf73360ab59c621a70e07d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SafeArrayCreate
SysReAllocStringLen
GetErrorInfo
VariantCopyInd
SysFreeString
OleLoadPicture
SafeArrayPtrOfIndex
SysAllocStringLen
SysStringLen
shell32
SHGetFolderPathA
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetFileInfoA
shlwapi
SHQueryValueExA
version
VerInstallFileA
VerQueryValueA
VerFindFileA
user32
SendMessageW
SetFocus
AdjustWindowRectEx
MapWindowPoints
ShowScrollBar
SetActiveWindow
SetClipboardData
EqualRect
MessageBeep
OemToCharA
ReleaseDC
EnableWindow
DrawTextA
DrawAnimatedRects
DispatchMessageW
GetWindowPlacement
GetIconInfo
OpenClipboard
MapVirtualKeyA
CreateIcon
SetScrollRange
GetCursor
GetMenuStringA
PeekMessageA
LoadIconA
MessageBoxA
wsprintfA
EnableScrollBar
CloseClipboard
GetKeyboardState
SetScrollInfo
GetKeyState
GetClientRect
CallWindowProcA
IntersectRect
SetCapture
RemoveMenu
IsChild
GetMessagePos
GetScrollInfo
InsertMenuItemA
SetParent
DestroyWindow
SetWindowTextA
GetClassInfoA
ReleaseCapture
GetSystemMenu
WaitMessage
GetMenuState
GetPropA
ChildWindowFromPoint
MsgWaitForMultipleObjects
GetWindowLongW
WindowFromPoint
SendMessageA
GetWindowDC
DestroyCursor
ScreenToClient
DrawFrameControl
GetWindowRect
GetSysColorBrush
GetMenuItemCount
UnhookWindowsHookEx
SetTimer
GetFocus
PostQuitMessage
GetCursorPos
ShowOwnedPopups
DefWindowProcA
GetClassNameA
IsWindowUnicode
DeleteMenu
InvalidateRect
GetCapture
GetLastActivePopup
MoveWindow
GetMenuItemID
SetForegroundWindow
GetScrollPos
SystemParametersInfoA
GetWindowTextA
DrawMenuBar
GetKeyboardLayoutNameA
CharUpperBuffA
PeekMessageW
RedrawWindow
GetDC
DestroyIcon
SetPropA
SetRect
SetWindowPlacement
RegisterClassA
CheckMenuItem
SetWindowsHookExA
IsWindowVisible
CallNextHookEx
GetForegroundWindow
UnregisterClassA
EmptyClipboard
SetMenuItemInfoA
CharToOemA
CreateMenu
GetDlgItem
CreatePopupMenu
DestroyMenu
BeginPaint
SetMenu
LoadKeyboardLayoutA
GetWindow
LoadCursorA
SetClassLongA
TrackPopupMenu
DrawIconEx
GetTopWindow
GetDCEx
EnumWindows
GetClassLongA
CharNextA
GetClipboardData
GetSubMenu
TranslateMessage
IsWindowEnabled
FrameRect
CharNextW
kernel32
IsBadReadPtr
LoadLibraryA
GetCommandLineA
GetModuleHandleA
VirtualAlloc
ExitThread
LoadLibraryExA
ExitProcess
lstrlenW
GetProcAddress
GetModuleHandleW
GetLastError
GlobalAlloc
lstrlenA
Sections
CODE Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ