Static task
static1
Behavioral task
behavioral1
Sample
04cae49dfbfbfdcd1af74015c1003bb5_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04cae49dfbfbfdcd1af74015c1003bb5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
04cae49dfbfbfdcd1af74015c1003bb5_JaffaCakes118
-
Size
39KB
-
MD5
04cae49dfbfbfdcd1af74015c1003bb5
-
SHA1
7f8f0b6b4c9da4ff52b2a5a3b3bc404aba360c54
-
SHA256
5a19008ca43153b8d02ef748dc51fa24a05cc520c085421df148cce9bd109ce3
-
SHA512
84b7b47b010f6279c49540793516d34fc864bfc79492a585b3bd3b8523e92d4318a6f8aa7c63a52aa99adde6ce091eaf3d35edd243362ccf5f5add67b37a0ff7
-
SSDEEP
768:EDw+ENnOTWEIwieOee5UqTGMCRSyHoGEMdEZaYo3:EDlKkij/57fCRzHsa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04cae49dfbfbfdcd1af74015c1003bb5_JaffaCakes118
Files
-
04cae49dfbfbfdcd1af74015c1003bb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
e205dbd4fde34678fbfb6c43a4d666ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyW
RegOpenKeyExA
RegGetKeySecurity
RegEnumKeyW
RegReplaceKeyA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegEnumKeyExW
RegEnumValueW
RegCreateKeyExA
RegQueryValueExA
RegQueryValueW
RegQueryValueA
RegLoadKeyA
RegDeleteValueW
RegOpenKeyA
RegDeleteKeyW
RegReplaceKeyW
RegDeleteValueA
RegFlushKey
RegOpenKeyW
RegDeleteValueA
RegOpenKeyExW
RegEnumValueW
RegCreateKeyExA
RegEnumValueA
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyW
RegDeleteKeyA
RegDeleteKeyW
RegFlushKey
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExW
RegEnumKeyExA
RegQueryValueW
RegReplaceKeyW
RegQueryInfoKeyW
RegQueryValueA
RegCreateKeyW
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyW
RegEnumValueW
RegLoadKeyW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyW
RegDeleteValueW
RegEnumKeyA
RegLoadKeyA
RegGetKeySecurity
comctl32
ImageList_DragMove
ImageList_DragShowNolock
ImageList_GetIconSize
InitCommonControls
ImageList_EndDrag
ImageList_Replace
ImageList_Read
ImageList_Draw
ImageList_DrawIndirect
ImageList_LoadImageA
ImageList_BeginDrag
ImageList_GetIcon
ImageList_GetDragImage
ImageList_Create
ImageList_AddIcon
ImageList_DragEnter
ImageList_AddMasked
ImageList_LoadImage
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_Remove
ImageList_Destroy
ImageList_LoadImageW
ImageList_GetImageInfo
ImageList_AddIcon
ImageList_GetIcon
ImageList_DrawIndirect
InitCommonControls
ImageList_Replace
ImageList_Remove
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_DrawEx
ImageList_EndDrag
ImageList_LoadImage
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_Merge
ImageList_GetImageInfo
ImageList_Read
ImageList_GetImageRect
ImageList_DragShowNolock
ImageList_Copy
ImageList_AddMasked
user32
GetDC
InsertMenuA
GetWindowTextA
IsWindow
IsMenu
GetFocus
GetDlgItem
CreateIcon
DrawTextW
CopyIcon
AppendMenuA
LoadCursorA
DrawTextA
BlockInput
CloseWindow
CopyRect
DrawIcon
DialogBoxParamA
GetWindowTextLengthA
LoadMenuA
BlockInput
AlignRects
DialogBoxParamA
CreateIcon
DrawTextW
DialogBoxParamW
CopyImage
DrawIconEx
InsertMenuA
CalcMenuBar
GetCursor
EndDialog
GetWindowTextLengthA
LoadCursorA
IsWindow
IsMenu
DrawIcon
CloseWindow
GetFocus
GetDlgItem
GetWindowTextA
DialogBoxParamW
BlockInput
GetCursor
IsWindow
DrawTextA
DialogBoxParamA
AppendMenuA
InsertMenuA
IsMenu
CloseWindow
DrawIconEx
CalcMenuBar
CreateIcon
DrawTextW
GetWindowTextA
LoadMenuA
AlignRects
GetDC
CopyIcon
kernel32
GetConsoleMode
CreateThread
DeleteFileA
FindFirstFileA
GetCommandLineA
GlobalFree
ReadConsoleA
OpenFileMappingA
CopyFileExW
GetStdHandle
SetLastError
ReadFile
GetFileSize
GetFileTime
WriteFile
DeleteFileW
GetCPInfo
GetLastError
DeleteAtom
OpenFile
CreateProcessA
CopyFileA
CreateDirectoryA
GetCPInfo
ReadConsoleA
DeleteFileA
GetFileSize
ExitThread
CopyFileExW
CreateProcessA
CopyFileExA
FindAtomA
GetCommandLineA
CreateThread
Sleep
CopyFileA
DeleteAtom
GetFileTime
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 337B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ