Static task
static1
Behavioral task
behavioral1
Sample
f3e5681fcdf6b63546844eb49a25ed20_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3e5681fcdf6b63546844eb49a25ed20_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3e5681fcdf6b63546844eb49a25ed20_JaffaCakes118
-
Size
128KB
-
MD5
f3e5681fcdf6b63546844eb49a25ed20
-
SHA1
bc293d2a1ac30ad6ebda59b347ddc962d488fd76
-
SHA256
799c1ea87630d8684c2545875c88aa604d5a9dd1ac917baf041ac46934bef53d
-
SHA512
281126ffb691f95be5ca7fe375185233d98b20b46e7609007159394c0eee30d87791a8e801dd519bb1c0f19de6ee2ad5e3c7a7e00da2d22dec47b046cd542a24
-
SSDEEP
1536:3Ezlc14g74cgLVEFLUFLLtalCvjWj3q7VoagHby:3EBc14g77gLWAZakv6ja7Voa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3e5681fcdf6b63546844eb49a25ed20_JaffaCakes118
Files
-
f3e5681fcdf6b63546844eb49a25ed20_JaffaCakes118.exe windows:4 windows x86 arch:x86
cb48a1ee4e17f660b15cebbabcc1ae71
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DrawEx
ImageList_Replace
ImageList_AddMasked
ImageList_AddIcon
ImageList_Draw
ImageList_GetIconSize
ImageList_Copy
ImageList_EndDrag
ImageList_Merge
InitCommonControls
ImageList_GetImageInfo
ImageList_Destroy
ImageList_DragLeave
ImageList_DragShowNolock
ImageList_Remove
ImageList_Create
ImageList_GetIcon
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_LoadImageA
ImageList_AddMasked
ImageList_GetImageRect
ImageList_Draw
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_DrawIndirect
ImageList_Create
ImageList_LoadImageW
ImageList_GetDragImage
ImageList_DragMove
ImageList_LoadImageA
ImageList_Remove
ImageList_Copy
ImageList_BeginDrag
ImageList_Replace
ImageList_DragEnter
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_Destroy
InitCommonControls
ImageList_LoadImageW
ImageList_LoadImage
ImageList_AddIcon
ImageList_DragEnter
ImageList_DrawEx
ImageList_Read
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Remove
ImageList_LoadImageA
ImageList_GetImageInfo
ImageList_DragMove
ImageList_Create
ImageList_AddMasked
ImageList_DragShowNolock
ImageList_GetIcon
ImageList_Draw
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_Destroy
ImageList_EndDrag
ImageList_Copy
user32
IsMenu
InsertMenuA
LoadMenuA
DialogBoxParamA
CopyImage
CopyIcon
DrawIcon
GetWindowTextLengthA
DialogBoxParamW
DrawTextW
GetWindowTextA
GetMenu
GetDlgItem
CreateIcon
CalcMenuBar
InsertMenuA
DrawTextW
LoadMenuA
AlignRects
CopyRect
BlockInput
DialogBoxParamW
GetCursor
CopyIcon
DrawTextA
DialogBoxParamA
GetFocus
GetDC
AppendMenuA
EndDialog
IsWindow
DrawIconEx
IsMenu
CreateIcon
CalcMenuBar
GetWindowTextLengthA
GetMenu
AppendMenuW
advapi32
RegDeleteKeyW
RegEnumValueW
RegCreateKeyExA
RegEnumKeyW
RegEnumValueA
RegOpenKeyExA
RegQueryValueW
RegDeleteKeyA
RegEnumKeyExW
RegEnumKeyA
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExA
RegOpenKeyW
RegQueryValueExW
RegQueryInfoKeyA
RegQueryValueA
RegOpenKeyA
RegEnumKeyExA
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 148B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 731B
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ