Static task
static1
Behavioral task
behavioral1
Sample
074e8f9497df880ec2ae5c7afb653e5d_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
074e8f9497df880ec2ae5c7afb653e5d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
074e8f9497df880ec2ae5c7afb653e5d_JaffaCakes118
-
Size
1.1MB
-
MD5
074e8f9497df880ec2ae5c7afb653e5d
-
SHA1
3d72fc8e94e5c42be304c124eb416f4fb432b5c4
-
SHA256
b2eba2abf54e9a1ab0f651361aa68b517e3e8d3330b4c02d40501922fc90ed1b
-
SHA512
f954d1ae2532ca5388796f9f44a6154934ef5986f9923e113763634837e4c1e69566dde4efe09bc1ae35ab27eb1cc1fef6c671ca674eafed06c9a42a7b3e633a
-
SSDEEP
24576:BaM7u0uRdxeU5x3AigLLKN6d5FQk+/TZJiMYOEDyIh:B6Bx3pN6Vb+6s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 074e8f9497df880ec2ae5c7afb653e5d_JaffaCakes118
Files
-
074e8f9497df880ec2ae5c7afb653e5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
55e71a1b80359d2afe4430fb1e00d86e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryInfoKeyW
RegFlushKey
RegCreateKeyExA
RegQueryValueA
RegEnumKeyExA
RegEnumKeyA
RegReplaceKeyA
RegOpenKeyW
RegOpenKeyExW
RegDeleteValueW
RegOpenKeyExA
RegLoadKeyW
RegEnumValueW
RegQueryValueA
RegQueryValueExA
RegEnumValueA
RegCreateKeyExW
RegLoadKeyA
RegLoadKeyW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExA
RegOpenKeyW
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueExW
RegEnumKeyW
RegQueryInfoKeyW
RegFlushKey
RegOpenKeyA
RegReplaceKeyA
RegQueryValueExA
RegLoadKeyA
RegEnumValueW
RegOpenKeyA
RegReplaceKeyA
RegDeleteKeyA
RegCreateKeyExW
RegEnumKeyExW
RegEnumKeyW
RegEnumValueA
RegDeleteKeyW
RegQueryInfoKeyW
RegDeleteValueA
RegReplaceKeyW
RegOpenKeyExW
RegLoadKeyW
RegQueryValueW
RegCreateKeyExA
RegOpenKeyW
RegEnumKeyW
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyA
RegCreateKeyW
RegCreateKeyExA
RegReplaceKeyW
RegQueryInfoKeyA
RegGetKeySecurity
RegDeleteKeyA
RegQueryInfoKeyW
RegReplaceKeyA
RegEnumKeyExW
RegEnumValueA
RegEnumValueW
RegDeleteValueA
RegOpenKeyExW
kernel32
GetCommandLineA
OpenFile
GetFileSize
CreateThread
FindFirstFileA
GetComputerNameA
OpenFileMappingA
GlobalFree
FindAtomA
ReadConsoleA
ReadFile
GetFileTime
CreateDirectoryA
CopyFileExW
Sleep
CopyFileExA
CreateProcessA
WriteFile
ExitThread
Sleep
DeleteAtom
ExitThread
GetCommandLineA
GetComputerNameA
DeleteFileW
WriteFile
GetStdHandle
DeleteFileA
CreateProcessA
CopyFileExA
GetCommandLineA
GetCPInfo
FindFirstFileA
CopyFileA
OpenFileMappingA
ReadFile
GetStdHandle
GetFileSize
ReadConsoleA
Sleep
SetLastError
CopyFileExA
gdi32
AddFontResourceW
ClearBitmapAttributes
AbortPath
GetPixel
GetBitmapBits
BitBlt
DeleteObject
CloseFigure
ExcludeClipRect
CreateSolidBrush
ExtTextOutA
DeleteDC
AddFontMemResourceEx
GetBrushOrgEx
GetClipBox
ClearBrushAttributes
CreateSolidBrush
CloseFigure
AddFontResourceTracking
AddFontResourceExW
GetBrushOrgEx
ClearBitmapAttributes
AddFontMemResourceEx
AddFontResourceW
GetBitmapBits
DeleteObject
AddFontResourceA
CloseMetaFile
user32
CopyIcon
DrawTextW
LoadCursorA
AppendMenuW
CalcMenuBar
EndDialog
GetDlgItem
GetFocus
AlignRects
DrawTextA
CreateIcon
DrawIconEx
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 936KB - Virtual size: 932KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ