Static task
static1
Behavioral task
behavioral1
Sample
2fcda246f37f2a3e5c383d51ae4a685a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2fcda246f37f2a3e5c383d51ae4a685a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fcda246f37f2a3e5c383d51ae4a685a_JaffaCakes118
-
Size
206KB
-
MD5
2fcda246f37f2a3e5c383d51ae4a685a
-
SHA1
1fccb0320e7e23597a5f51d6b661080c41716d26
-
SHA256
e14b14ed19f8ea4f3250bda4b48de55a76f16b9f10cbedbd3a1b456f76c5aa04
-
SHA512
40bef0e86bea7ef3d4cd29bc97faa4cc647884b750958af7c4e58ae81cbc1b7ca3d865367d06189f52b60768b4eff454c7ff152559f457ec6811a064f041d0c9
-
SSDEEP
6144:Jdx0uVZxzz2RUpai6+5D+ow/YM9F4te14ASvYayiSgc:10uVLzz2RUg9+5yLQte14RVSgc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fcda246f37f2a3e5c383d51ae4a685a_JaffaCakes118
Files
-
2fcda246f37f2a3e5c383d51ae4a685a_JaffaCakes118.exe windows:1 windows x86 arch:x86
8c65a5e8c77225fae62a5ae9f754062d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
SetStdHandle
ExpandEnvironmentStringsA
GetACP
MapViewOfFile
GetSystemDirectoryA
IsValidCodePage
FindResourceA
WriteConsoleW
GlobalMemoryStatus
GetVersionExA
FormatMessageA
LoadLibraryA
lstrcmpiA
HeapAlloc
SetUnhandledExceptionFilter
GetCurrentProcess
WideCharToMultiByte
GetCurrentDirectoryA
GetExitCodeThread
FreeEnvironmentStringsA
FreeLibrary
MulDiv
GetEnvironmentVariableA
CreateEventA
VirtualQueryEx
GetCommandLineW
IsDebuggerPresent
DeleteCriticalSection
HeapCreate
GetLastError
LCMapStringA
GetConsoleOutputCP
GetEnvironmentStrings
GetDateFormatA
GetStartupInfoA
GetModuleFileNameA
LCMapStringW
EnterCriticalSection
Module32Next
lstrlenA
WriteFile
RaiseException
GetModuleHandleA
SetHandleCount
GetCurrentThread
TlsGetValue
OpenProcess
SetPriorityClass
InitializeCriticalSection
GetThreadContext
ExitProcess
DuplicateHandle
GetStdHandle
QueryPerformanceFrequency
TlsSetValue
LeaveCriticalSection
CreateToolhelp32Snapshot
GetProcessWorkingSetSize
OpenEventA
InterlockedDecrement
VirtualAlloc
GetComputerNameW
DeleteFileA
RtlUnwind
user32
SendMessageA
UpdateWindow
SetClassLongA
GetDlgItemTextA
GetDesktopWindow
DefMDIChildProcA
ChildWindowFromPoint
CheckDlgButton
CheckMenuItem
GetMenu
GetClientRect
GetFocus
SetWindowPlacement
DefDlgProcA
SetScrollInfo
InvalidateRect
IsDialogMessageA
CallWindowProcA
SetWindowLongA
DestroyWindow
TranslateMessage
DefWindowProcA
GetMessageA
DeferWindowPos
GetCapture
LoadStringA
GetPropA
PostQuitMessage
ModifyMenuA
SetForegroundWindow
CheckRadioButton
SetUserObjectSecurity
IsWindowVisible
CreateDialogParamA
AppendMenuA
GetWindowThreadProcessId
IsDlgButtonChecked
SendMessageTimeoutA
DrawMenuBar
ExitWindowsEx
GetUpdateRgn
GetMenuItemCount
SetMenuItemInfoA
GetClassLongA
RegisterWindowMessageA
GetWindowRect
DispatchMessageA
EmptyClipboard
GetDC
InvalidateRgn
SetWindowTextA
EndDeferWindowPos
UnionRect
MapWindowPoints
FillRect
GetMenuItemID
ClientToScreen
EnableWindow
CreatePopupMenu
RedrawWindow
GetUserObjectSecurity
SetDlgItemTextA
EnableMenuItem
CreateIconIndirect
ReleaseCapture
TrackPopupMenuEx
EnumChildWindows
gdi32
GetStockObject
SetTextColor
SaveDC
Rectangle
SetROP2
RestoreDC
StartPage
GetBkMode
ExtTextOutA
SetBkMode
Polyline
SelectObject
DeleteObject
SelectClipRgn
CreateFontIndirectA
LineTo
SetMapMode
GetTextExtentPoint32A
CreateCompatibleBitmap
CreateSolidBrush
SetTextAlign
DeleteDC
CreatePen
CreateCompatibleDC
MoveToEx
EndPage
GetDeviceCaps
CreateDIBSection
StartDocA
SetBkColor
RectInRegion
CreateRectRgn
GetBkColor
CreateRectRgnIndirect
GetTextMetricsA
BitBlt
msvcrt
_acmdln
__setusermatherr
_except_handler3
_exit
_adjust_fdiv
__p__fmode
__set_app_type
__getmainargs
_controlfp
_XcptFilter
exit
__p__commode
_initterm
memcpy
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ