Static task
static1
Behavioral task
behavioral1
Sample
040dee551448f44f083c6fbed850c475_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
040dee551448f44f083c6fbed850c475_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
040dee551448f44f083c6fbed850c475_JaffaCakes118
-
Size
80KB
-
MD5
040dee551448f44f083c6fbed850c475
-
SHA1
e98d68515e81cb48982a6a74b9dddbf66bc04ae5
-
SHA256
849ef3e7954e664c8f8804663d54da072bd76b8b9c3de2b1c523b1553a14c3c0
-
SHA512
ccdd3650e0c60e5649232d0b3632110ef352a61617bd16c1154d8b6a11c569c8858ac188d57cbaf4de728ed415c7f64210baa5692f994556cdc12287d44bba3d
-
SSDEEP
1536:LDwrDuZY2lY2Ymy98YfYjBJx/p+J/HyzUXRmjh0h:LMrDoYKyzfgrx/2XR8hM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 040dee551448f44f083c6fbed850c475_JaffaCakes118
Files
-
040dee551448f44f083c6fbed850c475_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8f39f74cf20c13b5232cc3f18191a05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyIcon
GetCursor
EndDialog
CreateIcon
DrawTextW
DialogBoxParamW
GetDlgItem
AlignRects
LoadMenuA
CloseWindow
AppendMenuA
GetMenu
DialogBoxParamA
GetDC
DrawTextA
IsWindow
LoadCursorA
DrawIconEx
GetWindowTextLengthA
GetDC
GetWindowTextLengthA
GetCursor
AppendMenuW
DrawTextW
GetWindowTextA
CalcMenuBar
DrawIconEx
CopyRect
IsMenu
AlignRects
DrawIcon
CopyImage
BlockInput
EndDialog
DialogBoxParamA
LoadCursorA
advapi32
RegOpenKeyW
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueW
RegFlushKey
RegDeleteValueW
RegEnumValueW
RegEnumValueA
RegReplaceKeyA
RegGetKeySecurity
RegQueryInfoKeyW
RegLoadKeyA
RegQueryValueA
RegCreateKeyExA
RegLoadKeyW
RegEnumKeyExW
RegDeleteKeyW
RegEnumKeyA
RegCreateKeyW
kernel32
GetDateFormatA
Sleep
GetCommandLineA
GetModuleHandleA
lstrcatA
SetLastError
GetCPInfo
GetStringTypeA
CloseHandle
GetFileAttributesA
GlobalFree
GetLocalTime
FreeLibrary
GetLastError
GlobalAlloc
lstrcmpiA
GetModuleFileNameA
GetStdHandle
comctl32
ImageList_ReplaceIcon
ImageList_GetDragImage
ImageList_EndDrag
ImageList_AddIcon
ImageList_Merge
ImageList_DragLeave
ImageList_Draw
InitCommonControls
ImageList_GetIconSize
ImageList_GetImageRect
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_DragEnter
ImageList_Replace
ImageList_Read
ImageList_LoadImage
ImageList_Remove
ImageList_GetImageCount
ImageList_DrawIndirect
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 3KB - Virtual size: 663B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ