Static task
static1
Behavioral task
behavioral1
Sample
f6863e12c87c30b0cfb8726e279d35b1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6863e12c87c30b0cfb8726e279d35b1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f6863e12c87c30b0cfb8726e279d35b1_JaffaCakes118
-
Size
1006KB
-
MD5
f6863e12c87c30b0cfb8726e279d35b1
-
SHA1
374cb8965cc3fd1f8c356f2268dc06ccb010809e
-
SHA256
5abbc51cfab910cfd6620a7b8b778c4f5cdc0f148e3e0aefbbe4460e718c8d43
-
SHA512
e7e749cc5d97d10af1e6f4a18cdb052388ce80a3cf7d7f7e9626b19d8ccfed9a072496a6e2631b782782d6d9aa34d685bb941a960d4ebcca80a04da85ae735fb
-
SSDEEP
24576:435m97hH1CjkofDIyuF4OWONcA3TCggrgWV7pP:ym9VIZf649qjjCgg04
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6863e12c87c30b0cfb8726e279d35b1_JaffaCakes118
Files
-
f6863e12c87c30b0cfb8726e279d35b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbd8f5bd14d5085ca0d289c12ebf9326
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFileMappingA
GetStdHandle
CopyFileW
CreateProcessA
DeleteFileA
DeleteFileW
Sleep
GetCPInfo
FindAtomA
CopyFileExW
GetConsoleMode
FindFirstFileA
GetFileSize
DeleteAtom
GlobalFree
ReadConsoleA
CreateDirectoryA
GetComputerNameA
OpenFile
GetCommandLineA
CopyFileExA
SetLastError
ReadFile
user32
CopyRect
IsMenu
GetWindowTextA
DrawTextA
CreateIcon
DialogBoxParamW
BlockInput
LoadMenuA
CalcMenuBar
AlignRects
EndDialog
DialogBoxParamA
GetWindowTextLengthA
DrawIconEx
LoadCursorA
InsertMenuA
IsWindow
DrawTextW
GetCursor
AppendMenuA
GetFocus
GetDlgItem
CopyIcon
GetDC
comctl32
ImageList_GetIcon
ImageList_DrawEx
ImageList_LoadImageW
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetDragImage
ImageList_Destroy
ImageList_Read
ImageList_DrawIndirect
ImageList_BeginDrag
ImageList_Copy
ImageList_GetImageCount
ImageList_Draw
ImageList_DragShowNolock
ImageList_LoadImage
ImageList_LoadImageA
ImageList_GetImageRect
ImageList_Merge
ImageList_DragEnter
ImageList_Replace
ImageList_GetImageInfo
ImageList_Remove
ImageList_GetIconSize
advapi32
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegOpenKeyA
RegEnumKeyA
RegLoadKeyW
RegEnumValueW
RegCreateKeyExA
RegQueryValueA
RegEnumKeyW
RegGetKeySecurity
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RegEnumValueA
RegCreateKeyExW
RegDeleteKeyW
RegDeleteKeyA
RegReplaceKeyA
RegEnumKeyExA
RegQueryValueW
RegCreateKeyW
RegOpenKeyExA
gdi32
AddFontMemResourceEx
GetBitmapBits
CloseMetaFile
CopyMetaFileA
AbortPath
CloseFigure
RestoreDC
DeleteDC
CancelDC
ExcludeClipRect
ClearBitmapAttributes
ClearBrushAttributes
GetCurrentPositionEx
GetDCOrgEx
DeleteObject
AddFontResourceExW
CreateSolidBrush
BitBlt
BeginPath
AddFontResourceW
GetClipBox
shell32
SHChangeNotifyRegister
DragFinish
PathGetShortPath
DllGetVersion
SHDefExtractIconW
ExtractIconResInfoA
RestartDialog
SHUpdateImageW
CheckEscapesA
CheckEscapesW
FindExeDlgProc
SHFindFiles
CommandLineToArgvW
SHChangeNotifyDeregister
ShellAboutA
SHDefExtractIconA
ExtractIconEx
SHDoDragDrop
DragAcceptFiles
DragQueryFileA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 948KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 245B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ