Static task
static1
Behavioral task
behavioral1
Sample
f9db39c1b9fd1caf892d43752605653b_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f9db39c1b9fd1caf892d43752605653b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9db39c1b9fd1caf892d43752605653b_JaffaCakes118
-
Size
246KB
-
MD5
f9db39c1b9fd1caf892d43752605653b
-
SHA1
0e3b4212cdbdca0fef300d0b09a1204eba11e88e
-
SHA256
b15466910c8e2362299ba07788444da4a1598569a76424d191c09d8f49b1f55c
-
SHA512
053144b58b50493a361e0cec085c52015656494fc6426df623caa810026a84777475d75a7abbed110a25b2dd4b981767b2d7ab6937fe2e8bc327aa3d68828455
-
SSDEEP
6144:aq4F/cRnCXPZENfaNqFHfo8whAnTWaPq:rSkRCXhENfa4/pwtq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9db39c1b9fd1caf892d43752605653b_JaffaCakes118
Files
-
f9db39c1b9fd1caf892d43752605653b_JaffaCakes118.exe windows:4 windows x86 arch:x86
7a5d7010ac46786100d6d4c7ed058d87
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegEnumValueW
RegDeleteKeyW
RegCreateKeyExA
RegEnumValueA
RegGetKeySecurity
RegOpenKeyW
RegLoadKeyW
RegQueryValueA
RegOpenKeyExW
RegQueryValueExA
RegFlushKey
RegDeleteKeyA
RegQueryInfoKeyA
RegCreateKeyExW
RegEnumKeyW
RegOpenKeyA
RegEnumKeyExW
RegQueryInfoKeyW
RegReplaceKeyA
RegLoadKeyA
RegReplaceKeyA
RegEnumKeyExW
RegReplaceKeyW
RegCreateKeyExW
RegGetKeySecurity
RegCreateKeyExA
RegDeleteValueA
RegDeleteValueW
RegEnumKeyA
gdi32
GetBrushOrgEx
GetClipBox
ExcludeClipRect
RestoreDC
BeginPath
BitBlt
AddFontResourceW
DeleteObject
AddFontResourceExW
GetBitmapBits
SetTextColor
DeleteDC
ClearBitmapAttributes
AddFontMemResourceEx
BeginPath
DeleteDC
ClearBrushAttributes
SetTextColor
ExtTextOutA
AddFontResourceTracking
CloseMetaFile
GetPixel
AddFontResourceExW
BitBlt
AddFontResourceA
GetDCOrgEx
user32
LoadCursorA
CalcMenuBar
EndDialog
CloseWindow
IsWindow
AppendMenuW
GetMenu
GetWindowTextA
CopyRect
IsMenu
AppendMenuA
CopyIcon
GetDlgItem
CreateIcon
AlignRects
AppendMenuW
LoadMenuA
GetCursor
CopyIcon
CopyRect
CloseWindow
DrawIconEx
DrawIcon
IsMenu
AppendMenuA
LoadCursorA
comctl32
ImageList_GetImageCount
ImageList_Copy
ImageList_LoadImage
ImageList_DragEnter
ImageList_Create
ImageList_Replace
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_EndDrag
ImageList_Merge
ImageList_GetImageRect
ImageList_LoadImage
ImageList_GetImageRect
ImageList_LoadImageW
ImageList_AddMasked
ImageList_GetIconSize
ImageList_Replace
ImageList_GetIcon
ImageList_Read
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
kernel32
CreateProcessA
OpenFileMappingA
GetFileTime
CopyFileA
GetCPInfo
CreateDirectoryA
GetComputerNameA
CopyFileW
DeleteFileW
CopyFileExW
GetConsoleMode
CreateThread
CreateDirectoryA
CopyFileW
Sleep
CopyFileExW
FindFirstFileA
GetCPInfo
WriteFile
GlobalFree
GetFileTime
ReadFile
OpenFileMappingA
GetCommandLineA
GetLastError
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 153B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ