Static task
static1
Behavioral task
behavioral1
Sample
0362213297ccd9b7952a77a9baa3ac7b_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0362213297ccd9b7952a77a9baa3ac7b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0362213297ccd9b7952a77a9baa3ac7b_JaffaCakes118
-
Size
80KB
-
MD5
0362213297ccd9b7952a77a9baa3ac7b
-
SHA1
26451c883e3ccbb280bff1d99e8be82a7de82511
-
SHA256
2722d105db6d12f5c768f49c1675857477117a8b915b56082086392e01c9c475
-
SHA512
154d0e77b9b5626b281e6ee085f83f4a076b28387560bf9a13c4155cb7492b83dca4a2bb69c45759510505d601c6725f24f5936aeb206aa9dacb68690dffb784
-
SSDEEP
1536:LDwrDuZY2lY2Ymy98YfYjBJx/p+J/HyzUXRmjh0v:LMrDoYKyzfgrx/2XR8h2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0362213297ccd9b7952a77a9baa3ac7b_JaffaCakes118
Files
-
0362213297ccd9b7952a77a9baa3ac7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8f39f74cf20c13b5232cc3f18191a05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyIcon
GetCursor
EndDialog
CreateIcon
DrawTextW
DialogBoxParamW
GetDlgItem
AlignRects
LoadMenuA
CloseWindow
AppendMenuA
GetMenu
DialogBoxParamA
GetDC
DrawTextA
IsWindow
LoadCursorA
DrawIconEx
GetWindowTextLengthA
GetDC
GetWindowTextLengthA
GetCursor
AppendMenuW
DrawTextW
GetWindowTextA
CalcMenuBar
DrawIconEx
CopyRect
IsMenu
AlignRects
DrawIcon
CopyImage
BlockInput
EndDialog
DialogBoxParamA
LoadCursorA
advapi32
RegOpenKeyW
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueW
RegFlushKey
RegDeleteValueW
RegEnumValueW
RegEnumValueA
RegReplaceKeyA
RegGetKeySecurity
RegQueryInfoKeyW
RegLoadKeyA
RegQueryValueA
RegCreateKeyExA
RegLoadKeyW
RegEnumKeyExW
RegDeleteKeyW
RegEnumKeyA
RegCreateKeyW
kernel32
GetDateFormatA
Sleep
GetCommandLineA
GetModuleHandleA
lstrcatA
SetLastError
GetCPInfo
GetStringTypeA
CloseHandle
GetFileAttributesA
GlobalFree
GetLocalTime
FreeLibrary
GetLastError
GlobalAlloc
lstrcmpiA
GetModuleFileNameA
GetStdHandle
comctl32
ImageList_ReplaceIcon
ImageList_GetDragImage
ImageList_EndDrag
ImageList_AddIcon
ImageList_Merge
ImageList_DragLeave
ImageList_Draw
InitCommonControls
ImageList_GetIconSize
ImageList_GetImageRect
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_DragEnter
ImageList_Replace
ImageList_Read
ImageList_LoadImage
ImageList_Remove
ImageList_GetImageCount
ImageList_DrawIndirect
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 3KB - Virtual size: 663B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ