Static task
static1
Behavioral task
behavioral1
Sample
f6fe42aff8eff62938bd1ec841f94246_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6fe42aff8eff62938bd1ec841f94246_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f6fe42aff8eff62938bd1ec841f94246_JaffaCakes118
-
Size
67KB
-
MD5
f6fe42aff8eff62938bd1ec841f94246
-
SHA1
f69ff40cdc27230fd03fc4bebd0124ce3d2e5da6
-
SHA256
e09050dcba8dd4f5b763d4fa15072efc05f34270bd35c42dcec3914fbe7973ed
-
SHA512
78be2b032f436fed3d286555b930ad701b4b96068c760470a80b4395af350ce64927c0ca5c0a51a882ffcd166111546b9ccb2f65286fc1ff8c118bb7e4d46b7b
-
SSDEEP
1536:H57U5PMZSJR51NIR8k6+LfVcuAYphwPZ4ksKL9kmKNVXf1:Z7EJARX6+bVcuAyhwLHmN/f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6fe42aff8eff62938bd1ec841f94246_JaffaCakes118
Files
-
f6fe42aff8eff62938bd1ec841f94246_JaffaCakes118.exe windows:4 windows x86 arch:x86
000b3a41ba4a7d1368217586a19c4f1b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileW
OpenFile
ReadFile
GetCommandLineA
SetLastError
DeleteFileW
GetStdHandle
CopyFileExA
GetConsoleMode
GetCPInfo
GetComputerNameA
WriteFile
DeleteAtom
FindFirstFileA
GetLastError
GetFileSize
DeleteAtom
GetFileTime
CopyFileA
FindFirstFileA
Sleep
ExitThread
GetCommandLineA
GetComputerNameA
OpenFileMappingA
CreateProcessA
FindAtomA
CopyFileExA
CreateDirectoryA
OpenFile
GetConsoleMode
GetLastError
CreateThread
WriteFile
DeleteFileA
DeleteFileW
CopyFileW
GetStdHandle
CopyFileExW
advapi32
RegEnumValueA
RegOpenKeyExW
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteValueW
RegOpenKeyW
RegFlushKey
RegLoadKeyW
RegEnumValueW
RegReplaceKeyW
RegLoadKeyA
RegQueryValueW
RegDeleteKeyA
RegDeleteKeyW
RegEnumValueW
RegLoadKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyW
RegDeleteKeyW
RegGetKeySecurity
RegEnumKeyA
RegQueryInfoKeyA
RegCreateKeyExW
RegQueryValueA
RegCreateKeyExA
RegQueryValueExW
RegFlushKey
RegReplaceKeyA
user32
IsMenu
DialogBoxParamW
DrawIconEx
IsWindow
GetDC
DrawIcon
BlockInput
LoadCursorA
GetFocus
CopyRect
DialogBoxParamA
CalcMenuBar
CopyImage
EndDialog
CreateIcon
InsertMenuA
IsWindow
GetFocus
GetWindowTextA
CopyImage
CloseWindow
GetDC
DrawTextA
DialogBoxParamW
CopyIcon
LoadMenuA
InsertMenuA
CalcMenuBar
CopyRect
DialogBoxParamA
GetMenu
AlignRects
AppendMenuW
DrawIconEx
LoadCursorA
BlockInput
IsMenu
EndDialog
DrawIcon
GetWindowTextA
GetCursor
GetDlgItem
LoadMenuA
DialogBoxParamW
GetFocus
IsMenu
IsWindow
CreateIcon
InsertMenuA
CopyImage
BlockInput
AlignRects
GetDC
LoadCursorA
GetWindowTextLengthA
CalcMenuBar
DrawIconEx
CopyRect
AppendMenuA
AppendMenuW
EndDialog
GetDC
GetWindowTextLengthA
IsWindow
AlignRects
LoadCursorA
DialogBoxParamA
GetCursor
CloseWindow
LoadMenuA
IsMenu
DialogBoxParamW
CreateIcon
gdi32
GetBitmapBits
ExcludeClipRect
AddFontResourceExA
SetTextColor
BitBlt
AddFontResourceTracking
AddFontResourceA
CancelDC
GetPixel
CopyMetaFileA
GetClipBox
AbortPath
RestoreDC
GetPixel
AddFontResourceW
CloseMetaFile
CloseFigure
DeleteDC
ClearBitmapAttributes
DeleteObject
CreateSolidBrush
ClearBrushAttributes
BeginPath
ExtTextOutA
CloseFigure
AddFontResourceExA
ExcludeClipRect
AddFontMemResourceEx
GetCurrentPositionEx
RestoreDC
ClearBitmapAttributes
GetClipBox
GetPixel
CopyMetaFileA
GetBrushOrgEx
AbortPath
DeleteDC
BeginPath
BitBlt
ClearBrushAttributes
AddFontResourceA
RestoreDC
ClearBitmapAttributes
CloseMetaFile
DeleteDC
AddFontResourceExW
AbortPath
AddFontResourceW
GetBrushOrgEx
CreateSolidBrush
GetCurrentPositionEx
GetClipBox
BeginPath
GetPixel
GetBitmapBits
CancelDC
GetPixel
ClearBrushAttributes
CloseFigure
GetDCOrgEx
BitBlt
AddFontResourceExA
AddFontResourceTracking
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ