Static task
static1
Behavioral task
behavioral1
Sample
057586a134468c60376cf3ff68c4e2ec_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
057586a134468c60376cf3ff68c4e2ec_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
057586a134468c60376cf3ff68c4e2ec_JaffaCakes118
-
Size
34KB
-
MD5
057586a134468c60376cf3ff68c4e2ec
-
SHA1
e3f7d46685f722792b3631819d910f9eb1c177cc
-
SHA256
4377349d94e9a92c4e5fcaea73b3e94e2896b6bf00a9d15b35526851457f1acf
-
SHA512
3e8b6950ad8f1e4c6b6ff2fd109f16497bf5c2daa3a54d31820c3914408c35a2cc8da7c16a40e899b8b8502b7d163e7aa8d8075b935b6269c06947b183d80441
-
SSDEEP
768:cDieDwalOVe5kuQFyhJx9hD3Ob98x67Cz1YKB3:SDw+OgphJxjZnz1b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 057586a134468c60376cf3ff68c4e2ec_JaffaCakes118
Files
-
057586a134468c60376cf3ff68c4e2ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
79a8751a15d52be445e22e1396c8a023
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegEnumKeyExA
RegDeleteKeyW
RegLoadKeyA
RegDeleteKeyA
RegQueryInfoKeyW
RegEnumValueW
RegCreateKeyExW
RegFlushKey
RegOpenKeyW
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueA
RegReplaceKeyW
RegOpenKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteValueW
RegQueryValueW
RegCreateKeyExW
RegCreateKeyW
RegDeleteValueA
RegOpenKeyW
RegQueryValueA
RegLoadKeyW
user32
GetWindowTextLengthA
AppendMenuW
CopyRect
BlockInput
EndDialog
GetMenu
CloseWindow
DrawIcon
AppendMenuA
DrawTextW
CalcMenuBar
InsertMenuA
GetCursor
GetWindowTextA
LoadCursorA
IsWindow
DialogBoxParamW
CopyIcon
CopyImage
EndDialog
IsWindow
GetWindowTextLengthA
AppendMenuA
DrawIconEx
CreateIcon
LoadCursorA
GetFocus
IsMenu
LoadMenuA
CopyIcon
GetDlgItem
DrawTextW
CalcMenuBar
CopyImage
DrawTextW
IsWindow
GetWindowTextLengthA
AlignRects
BlockInput
LoadCursorA
GetDC
CalcMenuBar
AppendMenuA
GetFocus
DialogBoxParamW
InsertMenuA
LoadMenuA
CopyRect
DrawIcon
GetDlgItem
CloseWindow
DialogBoxParamA
DialogBoxParamW
CopyIcon
DrawIcon
CreateIcon
GetWindowTextA
GetDC
GetMenu
CloseWindow
DrawIconEx
GetDlgItem
LoadMenuA
AppendMenuW
GetCursor
BlockInput
kernel32
ReadFile
CreateDirectoryA
GetCPInfo
CopyFileExW
OpenFileMappingA
CopyFileA
GetConsoleMode
CreateThread
OpenFile
DeleteFileA
GetFileTime
FindAtomA
CopyFileW
DeleteAtom
GetStdHandle
CreateThread
CreateDirectoryA
GetCPInfo
FindFirstFileA
GetFileTime
GetConsoleMode
GetFileSize
ReadFile
CopyFileExW
DeleteAtom
GetStdHandle
Sleep
CreateProcessA
ExitThread
GetCommandLineA
CopyFileExA
GetComputerNameA
CopyFileA
comctl32
ImageList_GetImageCount
ImageList_Destroy
ImageList_Read
ImageList_DragMove
ImageList_Replace
ImageList_GetIcon
ImageList_Merge
ImageList_LoadImageW
ImageList_GetImageRect
ImageList_Create
ImageList_Remove
ImageList_ReplaceIcon
ImageList_AddIcon
InitCommonControls
ImageList_LoadImage
ImageList_Draw
ImageList_Copy
ImageList_EndDrag
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_Read
ImageList_Replace
ImageList_Remove
ImageList_BeginDrag
ImageList_GetImageRect
ImageList_Copy
ImageList_GetDragImage
ImageList_DragEnter
ImageList_AddMasked
InitCommonControls
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Merge
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ