Static task
static1
Behavioral task
behavioral1
Sample
08cbee04d9efdb098a3951a7f868e5aa_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
08cbee04d9efdb098a3951a7f868e5aa_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08cbee04d9efdb098a3951a7f868e5aa_JaffaCakes118
-
Size
101KB
-
MD5
08cbee04d9efdb098a3951a7f868e5aa
-
SHA1
feafc6eab456dbf4ce11b6d4b8484c0ad9cd48a0
-
SHA256
0e5072ded4b9884b3cc6f93efa0df530396baed475fc147bf03fb2aa4acd1752
-
SHA512
0aba3e340bf4beb97a1cde583554549520431b28b1d4375b2b0f4ced07c80579f7b5f39985fe3a1abe2be42dfcbc903c5395405bcf822d7096c78d43ecc09edc
-
SSDEEP
3072:L9xKpEEEeRVP9HZYSqX6qYp7vymDdmKcnvJ:LepEe/dZ2KqYp7vyadmKAJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08cbee04d9efdb098a3951a7f868e5aa_JaffaCakes118
Files
-
08cbee04d9efdb098a3951a7f868e5aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
ee9bbd5839bc7663d59d03ee28d5a1b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindow
CreateIcon
AlignRects
AppendMenuA
GetDlgItem
LoadMenuA
DrawIconEx
BlockInput
AppendMenuW
GetWindowTextA
IsMenu
GetFocus
GetCursor
CopyImage
DialogBoxParamA
CalcMenuBar
DialogBoxParamW
DrawTextW
DrawIcon
GetWindowTextLengthA
CreateIcon
GetDlgItem
InsertMenuA
AlignRects
DialogBoxParamW
GetCursor
CopyRect
EndDialog
DrawTextW
IsMenu
AppendMenuW
CalcMenuBar
IsWindow
DrawTextA
BlockInput
CloseWindow
CopyIcon
GetMenu
LoadCursorA
GetDC
AppendMenuA
GetWindowTextA
DrawIcon
comctl32
ImageList_Copy
ImageList_DragLeave
ImageList_LoadImage
ImageList_Read
ImageList_BeginDrag
ImageList_Replace
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Merge
ImageList_GetDragImage
ImageList_GetImageRect
ImageList_GetIcon
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_LoadImageA
ImageList_AddIcon
ImageList_DrawEx
ImageList_EndDrag
ImageList_LoadImageW
ImageList_GetImageCount
ImageList_Remove
ImageList_DragEnter
ImageList_DrawEx
ImageList_AddMasked
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_GetIcon
ImageList_Create
ImageList_Copy
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_Destroy
ImageList_LoadImageA
ImageList_AddIcon
ImageList_GetDragImage
ImageList_DrawIndirect
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_DragLeave
ImageList_Replace
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_Read
ImageList_Create
ImageList_Draw
ImageList_EndDrag
ImageList_AddIcon
ImageList_GetDragImage
ImageList_ReplaceIcon
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_DragMove
ImageList_DrawEx
advapi32
RegQueryValueW
RegCreateKeyW
RegOpenKeyExA
RegEnumValueW
RegLoadKeyW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegCreateKeyExW
RegEnumKeyExA
RegGetKeySecurity
RegFlushKey
RegDeleteKeyA
RegCreateKeyExA
RegReplaceKeyA
RegEnumKeyW
RegOpenKeyA
RegQueryValueExA
RegEnumValueA
RegGetKeySecurity
RegOpenKeyExA
RegLoadKeyA
RegDeleteValueW
RegCreateKeyExA
RegEnumKeyExA
RegEnumKeyExW
RegFlushKey
RegQueryValueExA
RegEnumValueW
RegQueryInfoKeyA
RegCreateKeyExW
RegLoadKeyW
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
kernel32
CreateThread
CopyFileW
FindFirstFileA
Sleep
GetFileSize
ExitThread
DeleteAtom
GetConsoleMode
ReadConsoleA
CreateDirectoryA
GlobalFree
CreateProcessA
FindAtomA
GetComputerNameA
CopyFileExW
WriteFile
SetLastError
OpenFile
CopyFileA
ReadFile
GetCommandLineA
OpenFileMappingA
DeleteFileW
GetLastError
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 182B
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ