Static task
static1
Behavioral task
behavioral1
Sample
ed162b9ee727e2955fc4a1dc27f4fce3_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ed162b9ee727e2955fc4a1dc27f4fce3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed162b9ee727e2955fc4a1dc27f4fce3_JaffaCakes118
-
Size
49KB
-
MD5
ed162b9ee727e2955fc4a1dc27f4fce3
-
SHA1
558c7d76c4326e5f2d3d18a7dd38798e94d30f18
-
SHA256
24906cf993d168e5ffc4ec5f16c2fa89cd08b8c665ce7c6ebaa96c0c52ccc5f1
-
SHA512
2ca344da45398f48eb824d83ca589977eb4fb024749353b351817071a1a7671ea846a80b34f44a9b4d1273df8c1cffda5266c128ce1d69163f3a8908210ec01c
-
SSDEEP
768:hNddIvwBYCySesc4VBpyCh8YFJS3cbHja2QYQZxGc9o9WP+Ub0z1jINw:hNbggyChlFg3cjjyBPHgINw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed162b9ee727e2955fc4a1dc27f4fce3_JaffaCakes118
Files
-
ed162b9ee727e2955fc4a1dc27f4fce3_JaffaCakes118.exe windows:4 windows x86 arch:x86
471d21c85b06ec5b6897039fe167afff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetMenu
EndDialog
LoadMenuA
DialogBoxParamA
DrawIcon
advapi32
RegCreateKeyExW
RegQueryValueExW
RegCreateKeyExA
RegDeleteKeyA
RegCreateKeyA
RegEnumKeyA
gdi32
GetClipBox
CreateDIBitmap
RestoreDC
CreateDIBSection
SetTextColor
GetDCOrgEx
CreateSolidBrush
GetPixel
CreateCompatibleBitmap
comctl32
DrawStatusTextW
CreateToolbarEx
CreateUpDownControl
ImageList_LoadImageA
CreateStatusWindowW
DrawStatusText
CreateMappedBitmap
ImageList_Draw
ImageList_DrawEx
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 57KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 946B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 259B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bbs Size: 512B - Virtual size: 406B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ