Static task
static1
Behavioral task
behavioral1
Sample
f7a0ae005f0d76ca0212cf40d36522e5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7a0ae005f0d76ca0212cf40d36522e5_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7a0ae005f0d76ca0212cf40d36522e5_JaffaCakes118
-
Size
84KB
-
MD5
f7a0ae005f0d76ca0212cf40d36522e5
-
SHA1
3e96fc3870656306a7335b59052c8ba123363a8b
-
SHA256
06bd1a9a525981a2da1c40e2c4703169611909e8d43bef5a75015a86ff1588ee
-
SHA512
75f0b8a5f55e8436de03945ae747b69f68b781954163bf0ebfb765e61a61e23f1e87d046ef66f25212eef64146a07d9c1ecd11955b42a19c6f53d78c9f2ef641
-
SSDEEP
768:s40OaySdjGgOr1nZLywwmWH5xgwVjmrOpze4mNgq/sE9FNUe0uORG0X:stGgOrrfS5TVUOL9q/suj0/5X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7a0ae005f0d76ca0212cf40d36522e5_JaffaCakes118
Files
-
f7a0ae005f0d76ca0212cf40d36522e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
b09ca7ac18dac1209c6164a3df770d51
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyW
RegCreateKeyExA
RegReplaceKeyA
RegQueryInfoKeyW
RegEnumValueW
RegEnumValueA
RegReplaceKeyW
RegFlushKey
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyW
RegQueryValueA
RegDeleteKeyA
RegReplaceKeyA
RegOpenKeyExA
RegEnumKeyExW
RegFlushKey
RegQueryInfoKeyW
RegEnumValueW
RegOpenKeyA
RegCreateKeyExW
RegCreateKeyExA
RegQueryValueExA
RegQueryInfoKeyA
RegEnumKeyW
RegLoadKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegLoadKeyA
RegDeleteValueW
RegCreateKeyExA
RegFlushKey
RegGetKeySecurity
RegReplaceKeyW
RegCreateKeyW
RegEnumKeyA
RegOpenKeyW
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyW
RegEnumKeyExA
RegDeleteValueA
comctl32
ImageList_AddIcon
ImageList_GetImageRect
ImageList_DragEnter
ImageList_DrawIndirect
ImageList_Draw
ImageList_GetDragImage
ImageList_Read
ImageList_DragLeave
ImageList_GetImageCount
ImageList_DragMove
ImageList_DrawEx
ImageList_GetIconSize
ImageList_Remove
InitCommonControls
gdi32
BeginPath
AddFontResourceTracking
DeleteDC
CloseFigure
AddFontMemResourceEx
GetDCOrgEx
GetBrushOrgEx
ClearBrushAttributes
AddFontResourceExA
GetBitmapBits
BitBlt
GetPixel
AbortPath
ClearBrushAttributes
GetCurrentPositionEx
GetBitmapBits
CloseMetaFile
GetDCOrgEx
AddFontResourceA
AddFontResourceExW
ExcludeClipRect
GetPixel
DeleteObject
GetClipBox
GetBrushOrgEx
AddFontResourceTracking
GetClipBox
CreateSolidBrush
ExtTextOutA
GetCurrentPositionEx
GetDCOrgEx
DeleteDC
AddFontResourceExA
AddFontResourceW
BeginPath
BitBlt
DeleteObject
CopyMetaFileA
CloseMetaFile
AddFontMemResourceEx
ExcludeClipRect
ClearBrushAttributes
AddFontResourceA
kernel32
ReadFile
Sleep
GetComputerNameA
GetStdHandle
CopyFileW
GetCPInfo
GlobalFree
CopyFileExA
GetCommandLineA
ReadConsoleA
OpenFileMappingA
CreateProcessA
CreateThread
DeleteFileW
GetCPInfo
ReadFile
DeleteFileA
GetLastError
SetLastError
GetCommandLineA
GetComputerNameA
CopyFileExA
GlobalFree
CreateDirectoryA
OpenFile
OpenFileMappingA
GetConsoleMode
FindFirstFileA
WriteFile
ReadConsoleA
GetFileTime
CopyFileW
user32
InsertMenuA
CreateIcon
LoadMenuA
IsWindow
LoadCursorA
CalcMenuBar
GetCursor
AlignRects
DialogBoxParamA
DrawIcon
GetWindowTextLengthA
DrawIconEx
BlockInput
GetMenu
DrawTextA
CopyIcon
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ