Static task
static1
Behavioral task
behavioral1
Sample
06dccd99b50cb757e07db70aa22c7dee_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
06dccd99b50cb757e07db70aa22c7dee_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
06dccd99b50cb757e07db70aa22c7dee_JaffaCakes118
-
Size
68KB
-
MD5
06dccd99b50cb757e07db70aa22c7dee
-
SHA1
ceee8b78f119fafc75679aa6839e00ae5579d500
-
SHA256
5293d9cc3e7bd34fcecc3b4b95f1be4ca04e36c5e8f10c68fddccfe2685386a5
-
SHA512
33cdc78be228fa31a059b88762d0b2fab51972aed118c4e515713d86a706d1d33a51e348e8e2ad00b76b8f33cda577a534e2c53948cf4f943d57fa70a83c098d
-
SSDEEP
1536:4uL5JzEyKDR3/7QU9Q15Sod4yReGyYd3:4NyU3/7QU9ZodF6Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06dccd99b50cb757e07db70aa22c7dee_JaffaCakes118
Files
-
06dccd99b50cb757e07db70aa22c7dee_JaffaCakes118.exe windows:4 windows x86 arch:x86
0cbff4848d9583760a18afcf0038e8b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RestoreDC
AddFontResourceExA
DeleteObject
GetClipBox
GetCurrentPositionEx
AbortPath
GetPixel
CreateSolidBrush
GetBrushOrgEx
BitBlt
ExtTextOutA
AddFontResourceA
GetPixel
ClearBrushAttributes
GetDCOrgEx
CloseMetaFile
SetTextColor
GetBitmapBits
AddFontResourceW
BeginPath
CopyMetaFileA
DeleteDC
AddFontResourceExW
CloseFigure
ClearBrushAttributes
CancelDC
GetClipBox
AddFontResourceExA
ClearBitmapAttributes
ExtTextOutA
AddFontResourceA
RestoreDC
AbortPath
CloseMetaFile
AddFontResourceExW
BitBlt
DeleteObject
AddFontResourceTracking
ExcludeClipRect
SetTextColor
GetPixel
GetDCOrgEx
CloseFigure
BeginPath
DeleteDC
AddFontMemResourceEx
GetPixel
CopyMetaFileA
ClearBrushAttributes
ClearBitmapAttributes
CloseMetaFile
CloseFigure
GetDCOrgEx
GetClipBox
BitBlt
GetCurrentPositionEx
AddFontResourceExW
ExcludeClipRect
CopyMetaFileA
DeleteObject
RestoreDC
BeginPath
AddFontResourceA
AddFontResourceW
AbortPath
GetBrushOrgEx
GetPixel
kernel32
FindAtomA
DeleteFileW
ReadConsoleA
CopyFileExA
OpenFile
GetStdHandle
FindFirstFileA
ExitThread
WriteFile
GetLastError
GetConsoleMode
OpenFileMappingA
GetCPInfo
CreateProcessA
SetLastError
ReadFile
DeleteFileA
GetCommandLineA
GetComputerNameA
CopyFileExA
GetLastError
CreateDirectoryA
Sleep
GetFileSize
CopyFileExW
ReadConsoleA
DeleteFileA
CreateThread
GetFileTime
GetStdHandle
OpenFile
DeleteAtom
FindAtomA
GetCPInfo
WriteFile
GetCommandLineA
OpenFileMappingA
CopyFileA
user32
DrawIconEx
CopyIcon
DialogBoxParamA
DrawTextW
BlockInput
GetDC
CalcMenuBar
DrawIcon
GetFocus
AlignRects
GetMenu
IsWindow
IsMenu
CopyImage
GetDlgItem
GetWindowTextA
CreateIcon
CloseWindow
AppendMenuW
CopyRect
GetMenu
AppendMenuA
DrawTextW
GetDC
CalcMenuBar
DrawIconEx
BlockInput
IsMenu
GetWindowTextA
GetWindowTextLengthA
DialogBoxParamW
DrawIcon
DrawTextA
IsWindow
LoadMenuA
InsertMenuA
GetDlgItem
EndDialog
CopyImage
CopyIcon
CalcMenuBar
BlockInput
DialogBoxParamA
GetCursor
IsWindow
DrawTextW
InsertMenuA
LoadMenuA
LoadCursorA
GetFocus
GetMenu
GetWindowTextLengthA
AppendMenuW
GetDlgItem
CopyRect
GetWindowTextA
CloseWindow
GetDC
CreateIcon
AppendMenuA
advapi32
RegEnumKeyExA
RegFlushKey
RegOpenKeyExW
RegDeleteKeyW
RegEnumValueW
RegOpenKeyExA
RegQueryValueA
RegReplaceKeyW
RegEnumValueA
RegDeleteValueW
RegDeleteKeyA
RegEnumKeyW
RegDeleteValueA
RegCreateKeyExW
RegOpenKeyA
RegQueryValueW
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegGetKeySecurity
RegReplaceKeyW
RegCreateKeyExW
RegDeleteValueA
RegDeleteKeyA
RegReplaceKeyA
RegEnumValueA
RegLoadKeyW
RegQueryValueA
RegQueryInfoKeyW
RegEnumKeyA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ