Static task
static1
Behavioral task
behavioral1
Sample
0bb8b118a54cf87e084b2a05c930a3fc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0bb8b118a54cf87e084b2a05c930a3fc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0bb8b118a54cf87e084b2a05c930a3fc_JaffaCakes118
-
Size
60KB
-
MD5
0bb8b118a54cf87e084b2a05c930a3fc
-
SHA1
0f00341fcb185fed5df1d0ff589319e5a3b75513
-
SHA256
d51e5c799c4637975ba908092db6c7e3b84cf6f5dbc88eabd0b382b6a82b4f99
-
SHA512
60915c10a0f7b0cf9078b63c564324902608151d3dd1f33c9101d37dfd0f2221272603a3994a16da44898af8fc9cf9a6603e202d2d3b4e81e005ca6481386653
-
SSDEEP
1536:dM8V7ILjl7ObO/yoQM7Zj9OxxtxuHssdKV70m+wPWz:C8V7S/R7Zj9Ox97Vd3P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bb8b118a54cf87e084b2a05c930a3fc_JaffaCakes118
Files
-
0bb8b118a54cf87e084b2a05c930a3fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
92051e1eb3c35bb392311be74dc8865f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CloseFigure
CloseMetaFile
ClearBitmapAttributes
DeleteDC
RestoreDC
AddFontResourceExA
AddFontMemResourceEx
GetPixel
AddFontResourceTracking
ClearBrushAttributes
AddFontResourceA
ExtTextOutA
CopyMetaFileA
AddFontResourceExW
GetPixel
GetCurrentPositionEx
ExcludeClipRect
CreateSolidBrush
AddFontResourceW
BitBlt
user32
AppendMenuA
GetWindowTextA
DrawIcon
GetFocus
DrawTextA
AppendMenuW
GetMenu
IsMenu
DrawTextW
IsWindow
GetDC
InsertMenuA
GetCursor
CloseWindow
LoadCursorA
DialogBoxParamA
LoadMenuA
GetMenu
AlignRects
EndDialog
DrawIcon
GetFocus
AppendMenuW
GetDlgItem
GetWindowTextA
DrawTextW
IsMenu
IsWindow
GetWindowTextLengthA
LoadCursorA
DialogBoxParamW
DrawIconEx
BlockInput
DialogBoxParamA
DrawTextA
AlignRects
CloseWindow
GetDlgItem
GetFocus
IsWindow
GetMenu
CalcMenuBar
GetWindowTextLengthA
LoadCursorA
DrawTextW
AppendMenuW
CreateIcon
DrawIcon
DrawIconEx
AppendMenuA
LoadMenuA
CopyIcon
GetWindowTextA
GetDC
DialogBoxParamW
InsertMenuA
advapi32
RegDeleteKeyA
RegReplaceKeyW
RegCreateKeyExW
RegFlushKey
RegLoadKeyA
RegEnumValueW
RegQueryValueExW
RegEnumKeyA
RegCreateKeyW
RegDeleteKeyW
RegLoadKeyW
RegDeleteValueA
RegQueryInfoKeyW
RegEnumValueA
RegCreateKeyExA
RegEnumKeyExW
RegOpenKeyW
RegEnumKeyExA
comctl32
ImageList_Create
ImageList_Draw
ImageList_GetDragImage
ImageList_EndDrag
ImageList_Copy
ImageList_DragEnter
ImageList_Replace
ImageList_GetImageInfo
ImageList_DragMove
ImageList_LoadImage
ImageList_AddMasked
ImageList_GetImageRect
ImageList_DragLeave
ImageList_Remove
ImageList_LoadImageW
ImageList_ReplaceIcon
ImageList_Read
ImageList_Remove
ImageList_DrawIndirect
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_DrawEx
ImageList_Merge
ImageList_Copy
ImageList_Read
ImageList_LoadImageA
ImageList_AddIcon
ImageList_GetIcon
ImageList_BeginDrag
ImageList_Create
ImageList_DragMove
ImageList_LoadImage
ImageList_GetDragImage
ImageList_DragLeave
ImageList_EndDrag
ImageList_Replace
ImageList_Destroy
ImageList_GetImageRect
ImageList_LoadImageW
ImageList_GetIconSize
ImageList_DragEnter
ImageList_DrawIndirect
ImageList_DragMove
ImageList_DrawEx
ImageList_Read
ImageList_Copy
ImageList_GetImageInfo
ImageList_DragLeave
InitCommonControls
ImageList_Merge
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Destroy
ImageList_AddIcon
ImageList_GetImageRect
ImageList_Create
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ