Static task
static1
Behavioral task
behavioral1
Sample
2feb71bde54a8c3d0970a801c273f2b0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2feb71bde54a8c3d0970a801c273f2b0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2feb71bde54a8c3d0970a801c273f2b0_JaffaCakes118
-
Size
77KB
-
MD5
2feb71bde54a8c3d0970a801c273f2b0
-
SHA1
be37e32ee74dd2458f81351148e2fff48d06dbb7
-
SHA256
b2d587262149926bad10e1b0e4894c84b616a8df9ba6a6088a5ecde31df85459
-
SHA512
1389b0a05c41f2d13eadb37e787d83dd9a40ccbf06c0ef11255ffaeba0a98f5fea584892e49a937a994528ee4a439eab9f960a3694fcb3b3c661701cbf35e6b0
-
SSDEEP
1536:DeAZLLL1GXAQ5k8OvWNfk3QjWq6NmOaDraK/pGmeNB:uQB8OW6NmOa/aK/ZeNB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2feb71bde54a8c3d0970a801c273f2b0_JaffaCakes118
Files
-
2feb71bde54a8c3d0970a801c273f2b0_JaffaCakes118.exe windows:5 windows x86 arch:x86
1748ac06aad9bfcf6f949b349ef34cfd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrStrA
StrStrIA
StrChrA
kernel32
lstrcmpA
AllocConsole
GetStdHandle
WriteFile
WriteConsoleA
ReadFile
ReadConsoleA
MultiByteToWideChar
HeapFree
lstrcmpiA
WideCharToMultiByte
HeapAlloc
SetConsoleMode
GetConsoleMode
GetLastError
GetModuleFileNameA
ExitProcess
Sleep
CreateThread
GetTimeFormatA
CloseHandle
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
lstrlenA
GetFileAttributesA
GetSystemDefaultLCID
GetModuleHandleA
ReadConsoleInputA
lstrcatA
WaitForSingleObject
SetConsoleCursorPosition
FillConsoleOutputCharacterA
GetConsoleScreenBufferInfo
PeekNamedPipe
lstrlenW
CreateProcessA
DuplicateHandle
GetCurrentProcess
CreatePipe
GetVersion
GetExitCodeProcess
TerminateProcess
GetTickCount
SetCurrentDirectoryA
DeleteFileA
ExpandEnvironmentStringsA
GetCurrentDirectoryA
lstrcpyA
lstrcmpW
GetCommandLineA
GetProcessHeap
RemoveDirectoryA
lstrcatW
CreateDirectoryA
GetTempPathA
user32
GetDesktopWindow
CharLowerA
IsCharAlphaNumericA
GetParent
DialogBoxParamA
CharToOemA
MessageBoxA
GetForegroundWindow
GetWindowRect
CopyRect
OffsetRect
SetWindowPos
LoadStringA
SetDlgItemTextA
GetDlgItem
SetFocus
GetDlgItemTextA
EndDialog
wsprintfA
advapi32
RegQueryValueExA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExW
ole32
CoUninitialize
CoGetObject
CLSIDFromProgID
CoCreateInstance
CoInitialize
oleaut32
VariantTimeToSystemTime
VarBstrFromCy
VarBstrFromR4
VarBstrFromR8
VarBstrFromDec
SafeArrayUnaccessData
LoadTypeLi
SysFreeString
VariantInit
SysAllocString
DispInvoke
DispGetIDsOfNames
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SysStringLen
SafeArrayAccessData
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE