Static task
static1
Behavioral task
behavioral1
Sample
01d524a79eae0ca4eac1a871a48de908_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
01d524a79eae0ca4eac1a871a48de908_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
01d524a79eae0ca4eac1a871a48de908_JaffaCakes118
-
Size
80KB
-
MD5
01d524a79eae0ca4eac1a871a48de908
-
SHA1
d67273aec027e9c4d2278c6be194ea1a6e25cb7f
-
SHA256
22ccb3c6450e232e546e6655262fd379d4e85efbbc5af4c9928a7893e0bb77ac
-
SHA512
70f3af5c3d935eaea505b9d215d2d4951e0bf3002760dd670dc41fd019e05187defe9465bd190710aa7126188a497edcac8e5025e6ab0155f46c312aabb3a813
-
SSDEEP
1536:1xcYp5uIsqXTjIZBnKmHckGN0fMW4uDoevF:3cYp5u6X/wpLcjcMy19
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01d524a79eae0ca4eac1a871a48de908_JaffaCakes118
Files
-
01d524a79eae0ca4eac1a871a48de908_JaffaCakes118.exe windows:4 windows x86 arch:x86
791be0feabd30abb87da13d083cce4df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Replace
ImageList_LoadImageW
ImageList_Destroy
ImageList_Copy
ImageList_GetImageCount
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_GetDragImage
ImageList_EndDrag
ImageList_GetImageInfo
ImageList_GetImageRect
ImageList_Read
ImageList_DrawEx
ImageList_DragEnter
ImageList_AddIcon
ImageList_Draw
ImageList_DrawIndirect
ImageList_LoadImage
user32
AppendMenuW
CopyImage
GetFocus
AppendMenuA
GetDlgItem
CopyIcon
DialogBoxParamW
CalcMenuBar
DialogBoxParamA
LoadMenuA
DrawTextW
GetDC
EndDialog
LoadCursorA
DrawIcon
BlockInput
CreateIcon
DrawIconEx
GetWindowTextA
CopyIcon
AppendMenuA
EndDialog
LoadMenuA
CloseWindow
GetCursor
IsMenu
AppendMenuW
GetDC
CopyImage
DrawIcon
DrawTextA
DrawIconEx
InsertMenuA
AlignRects
DrawTextW
BlockInput
GetFocus
advapi32
RegEnumKeyW
RegReplaceKeyW
RegEnumKeyExW
RegQueryInfoKeyA
RegLoadKeyW
RegQueryInfoKeyW
RegCreateKeyW
RegReplaceKeyA
RegFlushKey
RegLoadKeyA
RegCreateKeyExA
RegQueryValueExA
RegDeleteValueW
RegQueryValueW
RegQueryValueA
RegEnumValueW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExA
kernel32
FreeLibrary
GlobalAlloc
GetCPInfo
GetModuleHandleA
Sleep
lstrlenA
GlobalFree
GetDateFormatA
GetLastError
GetCommandLineA
GetStringTypeW
GetLocalTime
GetFileSize
CloseHandle
GetStringTypeA
DeleteFileA
lstrcpyA
lstrcmpiA
GetStdHandle
SetLastError
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xdata Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.resr Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ