Static task
static1
Behavioral task
behavioral1
Sample
2fbb7611629efcbce45ab8b22cb147e9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fbb7611629efcbce45ab8b22cb147e9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fbb7611629efcbce45ab8b22cb147e9_JaffaCakes118
-
Size
236KB
-
MD5
2fbb7611629efcbce45ab8b22cb147e9
-
SHA1
ad8927043e6d8070493e169ebdd5edcd77e196de
-
SHA256
dbf1eff8fc3a663a58fcb97f1783275e8e8c739dba0d197cf6561208f670060c
-
SHA512
5ac4293fe38219cb60a406d444f51a8030bd2cf1df3c555e8f88edf7769a00852f31fb4f217560bd986b71230b91691220400040f5dbc2ee420e589dc1a6e3ef
-
SSDEEP
6144:36p4J0yqg575g/R81LMWE+KcvKOJv3g+Mg:qkXh5g/4b1Ki/a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fbb7611629efcbce45ab8b22cb147e9_JaffaCakes118
Files
-
2fbb7611629efcbce45ab8b22cb147e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
53e73cac4ad59d4d66dc9b464952eda9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VariantClear
SysFreeString
SysAllocString
gdi32
GetStockObject
GetDeviceCaps
DeleteObject
SetBkColor
BitBlt
SelectObject
CreateCompatibleDC
CreateSolidBrush
SetTextColor
kernel32
IsBadReadPtr
Sleep
VirtualFree
WriteFile
HeapCreate
IsValidCodePage
WideCharToMultiByte
CreateProcessA
SizeofResource
SetStdHandle
GetDiskFreeSpaceA
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
FindFirstFileA
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
HeapSize
GetCurrentDirectoryA
GetCommandLineW
LockResource
GetCurrentProcessId
WritePrivateProfileStringA
GetEnvironmentStrings
FileTimeToLocalFileTime
CreateProcessW
RemoveDirectoryA
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
UnmapViewOfFile
LCMapStringW
GetLastError
LeaveCriticalSection
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
GlobalLock
DuplicateHandle
FindFirstFileW
CompareStringA
lstrcpyA
FindNextFileW
lstrcmpA
FreeEnvironmentStringsW
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileW
SetEvent
SetErrorMode
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
FindResourceA
LoadLibraryA
GetVersionExA
ResetEvent
GetTickCount
QueryPerformanceCounter
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
GetLocaleInfoA
SetEndOfFile
GetConsoleMode
VirtualQuery
GetVersion
WriteConsoleA
GetEnvironmentVariableA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
GetStartupInfoA
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
UnhandledExceptionFilter
GetPrivateProfileStringA
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
lstrlenW
TlsGetValue
GetSystemTime
SetLastError
GetCommandLineA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
FormatMessageW
LocalFree
GetOEMCP
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
InterlockedExchange
GetStringTypeA
lstrcmpiA
GetCPInfo
GetTempPathA
LoadLibraryExW
CreateFileA
ExpandEnvironmentStringsA
lstrcatA
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
FindNextFileA
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
CreateFileMappingA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
VirtualAlloc
TlsAlloc
GetFileSize
OutputDebugStringA
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
user32
CreateWindowExA
GetSubMenu
CheckMenuItem
SetWindowTextA
SetWindowLongA
ReleaseCapture
SetCapture
GetWindowRect
EnableMenuItem
GetSystemMetrics
DefWindowProcA
BeginPaint
GetMessageA
SetFocus
FillRect
SetTimer
GetWindowLongA
RegisterClassA
IsIconic
LoadStringA
GetWindow
IsWindowEnabled
TranslateMessage
SetWindowPos
PeekMessageA
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetDlgItem
GetActiveWindow
GetClientRect
ReleaseDC
GetCursorPos
GetDC
PostMessageA
EndPaint
DispatchMessageA
IsWindow
LoadBitmapA
PostQuitMessage
DestroyMenu
MoveWindow
LoadIconA
TrackPopupMenu
SendMessageA
GetDesktopWindow
SetForegroundWindow
EndDialog
DispatchMessageW
SetDlgItemTextA
MessageBoxA
DialogBoxParamA
GetSysColor
SystemParametersInfoA
IsWindowVisible
GetFocus
InvalidateRect
wsprintfA
SetCursor
ClientToScreen
DestroyWindow
LoadCursorA
advapi32
RegSetValueExA
RegDeleteKeyA
RegQueryValueExW
RegCreateKeyExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExA
msvcrt
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
exit
_controlfp
__p__commode
__p__fmode
__set_app_type
_onexit
_except_handler3
__dllonexit
_adjust_fdiv
Sections
.text Size: 200KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ