Static task
static1
Behavioral task
behavioral1
Sample
07b8c31d8519f04103cde011d24c82ec_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07b8c31d8519f04103cde011d24c82ec_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07b8c31d8519f04103cde011d24c82ec_JaffaCakes118
-
Size
76KB
-
MD5
07b8c31d8519f04103cde011d24c82ec
-
SHA1
da58a5e74bfc4b21844729c62cfb34033a9b0969
-
SHA256
564cafe97d28558cebf816976b5e6079ddf5e4887eea6b6f77ef97314cde32e9
-
SHA512
09c46927751be23576cff93dec67188504b00464736155557b710befb09e3c54b81e13e67ef4eae19ae1d62743c33c16d23aebdeaa720518b4d8906e717c404e
-
SSDEEP
1536:APSPLWdD8FpCT56ieiyIZYuetiS8F9pN9e7uQZx8ZAliIfOT:APSPLWdD8F80iHt97TN9eimxEA4V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07b8c31d8519f04103cde011d24c82ec_JaffaCakes118
Files
-
07b8c31d8519f04103cde011d24c82ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
d67fa12bc21728c5235bc00d4c81ca3c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
CopyIcon
GetWindowTextA
LoadMenuA
DrawTextW
DrawTextA
GetDC
GetMenu
CloseWindow
DialogBoxParamA
GetFocus
CopyRect
LoadCursorA
GetDlgItem
GetWindowTextLengthA
DrawIconEx
IsMenu
IsWindow
InsertMenuA
EndDialog
DialogBoxParamW
kernel32
GetOEMCP
GetACP
TerminateProcess
lstrcpynA
SetHandleCount
GetVersion
LCMapStringW
GetStdHandle
GetFileType
GetCommandLineA
lstrcatA
GetStringTypeA
GetCPInfo
MultiByteToWideChar
SetFilePointer
lstrcpyA
GetStringTypeW
lstrcpynW
CreateFileA
GetCurrentProcess
WriteFile
LCMapStringA
comctl32
DrawStatusText
MenuHelp
ImageList_Create
CreateStatusWindowW
ImageList_Destroy
ImageList_LoadImageW
ImageList_AddIcon
CreateToolbarEx
ImageList_DrawEx
ImageList_Copy
InitCommonControls
CreateStatusWindow
advapi32
RegQueryValueW
RegDeleteKeyW
RegQueryValueA
RegEnumKeyExW
RegDeleteValueW
RegEnumValueA
RegOpenKeyExA
RegEnumKeyW
RegEnumValueW
RegQueryValueExA
RegOpenKeyExW
RegSetValueA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 17.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ