Static task
static1
Behavioral task
behavioral1
Sample
019292bb6afabd6b1451abef7bfd854e_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
019292bb6afabd6b1451abef7bfd854e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
019292bb6afabd6b1451abef7bfd854e_JaffaCakes118
-
Size
80KB
-
MD5
019292bb6afabd6b1451abef7bfd854e
-
SHA1
9733ba2eba32de10af09f87478fb24aa672937e9
-
SHA256
ab2c71599383471ff2f8b23d964cfa9c309ae02ac00127188bd4430719558b8d
-
SHA512
2ee395e074b1c82af1e91faea6d14cc0bb30719a54b78d898c74120789ca95cdd1f186b7181d0bcbf6de264d64f88030733624da124630fb09a9413c6d76c2c8
-
SSDEEP
1536:LDwrDuZY2lY2Ymy98YfYjBJx/p+J/HyzUXRmjh0L:LMrDoYKyzfgrx/2XR8hC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 019292bb6afabd6b1451abef7bfd854e_JaffaCakes118
Files
-
019292bb6afabd6b1451abef7bfd854e_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8f39f74cf20c13b5232cc3f18191a05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyIcon
GetCursor
EndDialog
CreateIcon
DrawTextW
DialogBoxParamW
GetDlgItem
AlignRects
LoadMenuA
CloseWindow
AppendMenuA
GetMenu
DialogBoxParamA
GetDC
DrawTextA
IsWindow
LoadCursorA
DrawIconEx
GetWindowTextLengthA
GetDC
GetWindowTextLengthA
GetCursor
AppendMenuW
DrawTextW
GetWindowTextA
CalcMenuBar
DrawIconEx
CopyRect
IsMenu
AlignRects
DrawIcon
CopyImage
BlockInput
EndDialog
DialogBoxParamA
LoadCursorA
advapi32
RegOpenKeyW
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueW
RegFlushKey
RegDeleteValueW
RegEnumValueW
RegEnumValueA
RegReplaceKeyA
RegGetKeySecurity
RegQueryInfoKeyW
RegLoadKeyA
RegQueryValueA
RegCreateKeyExA
RegLoadKeyW
RegEnumKeyExW
RegDeleteKeyW
RegEnumKeyA
RegCreateKeyW
kernel32
GetDateFormatA
Sleep
GetCommandLineA
GetModuleHandleA
lstrcatA
SetLastError
GetCPInfo
GetStringTypeA
CloseHandle
GetFileAttributesA
GlobalFree
GetLocalTime
FreeLibrary
GetLastError
GlobalAlloc
lstrcmpiA
GetModuleFileNameA
GetStdHandle
comctl32
ImageList_ReplaceIcon
ImageList_GetDragImage
ImageList_EndDrag
ImageList_AddIcon
ImageList_Merge
ImageList_DragLeave
ImageList_Draw
InitCommonControls
ImageList_GetIconSize
ImageList_GetImageRect
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_DragEnter
ImageList_Replace
ImageList_Read
ImageList_LoadImage
ImageList_Remove
ImageList_GetImageCount
ImageList_DrawIndirect
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 3KB - Virtual size: 663B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ