Static task
static1
Behavioral task
behavioral1
Sample
0c5eba0bf4e8a283fff7961f7a2c3bcf_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c5eba0bf4e8a283fff7961f7a2c3bcf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c5eba0bf4e8a283fff7961f7a2c3bcf_JaffaCakes118
-
Size
34KB
-
MD5
0c5eba0bf4e8a283fff7961f7a2c3bcf
-
SHA1
7dd3d7daddb043c56f764449284c57bd862dbb54
-
SHA256
9b28369a7b628b9f43b2b1bfa4a54c75670eaffe692260195b1c4adf008d9fab
-
SHA512
47be36630a7faef3e840acc29f06d43dcacbf05b7c8fd043d41c70a171a49e2a813022839a128acece19201a2d1ad5fa178322abfb9940ac98af039d1f3c38ec
-
SSDEEP
768:HqwnhaPveiJAsiP2Z1bXC4HMtbgs1DJVtZIecy:HL8OiasiPa1by4stbgMDJLZpcy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c5eba0bf4e8a283fff7961f7a2c3bcf_JaffaCakes118
Files
-
0c5eba0bf4e8a283fff7961f7a2c3bcf_JaffaCakes118.exe windows:4 windows x86 arch:x86
02fd3baee07dbf3d8303fd4948c7c78c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyRect
BlockInput
InsertMenuA
GetDlgItem
EndDialog
AppendMenuA
GetCursor
DrawIcon
IsMenu
CloseWindow
GetFocus
AlignRects
AppendMenuW
DrawTextW
IsWindow
DrawIconEx
GetMenu
GetCursor
GetDlgItem
CopyImage
DrawIconEx
EndDialog
DrawIcon
GetMenu
GetDC
IsMenu
CloseWindow
CopyRect
BlockInput
GetWindowTextLengthA
GetFocus
DrawTextA
IsWindow
InsertMenuA
AlignRects
AppendMenuW
LoadMenuA
IsWindow
AppendMenuA
GetWindowTextLengthA
CopyImage
AlignRects
BlockInput
CopyRect
InsertMenuA
GetCursor
DrawIconEx
GetMenu
CalcMenuBar
LoadMenuA
DrawTextA
AppendMenuW
DrawTextW
CopyIcon
CopyImage
DialogBoxParamW
CreateIcon
DrawTextA
CalcMenuBar
DrawIcon
DrawTextW
LoadMenuA
GetCursor
DrawIconEx
BlockInput
CloseWindow
DialogBoxParamA
CopyRect
GetMenu
GetWindowTextA
GetDC
GetDlgItem
CopyIcon
InsertMenuA
GetWindowTextLengthA
AppendMenuA
kernel32
OpenFileMappingA
GetFileSize
GetStdHandle
CopyFileW
WriteFile
GetLastError
GetCPInfo
GlobalFree
CopyFileExA
Sleep
DeleteAtom
CreateProcessA
DeleteFileW
GetConsoleMode
GetFileTime
CreateDirectoryA
CopyFileA
DeleteFileA
GetComputerNameA
SetLastError
FindFirstFileA
GetCommandLineA
ReadConsoleA
ReadFile
CopyFileA
GetCommandLineA
SetLastError
CreateProcessA
ReadFile
FindAtomA
DeleteFileA
GetLastError
OpenFile
OpenFileMappingA
GetConsoleMode
ReadConsoleA
GetFileTime
CopyFileExW
Sleep
WriteFile
CopyFileExA
ExitThread
GetStdHandle
FindFirstFileA
GetFileSize
GetCPInfo
DeleteAtom
CreateDirectoryA
advapi32
RegDeleteKeyW
RegCreateKeyExW
RegEnumValueW
RegDeleteValueA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryInfoKeyA
RegQueryValueExA
RegReplaceKeyA
RegGetKeySecurity
RegOpenKeyW
RegReplaceKeyW
RegOpenKeyExA
RegQueryValueExW
RegCreateKeyW
RegOpenKeyW
RegDeleteKeyW
RegQueryInfoKeyA
RegReplaceKeyA
RegQueryValueExW
RegEnumValueW
RegFlushKey
RegOpenKeyExA
RegReplaceKeyW
RegCreateKeyExW
RegQueryInfoKeyW
RegQueryValueA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyW
RegOpenKeyExW
RegQueryValueW
gdi32
CreateSolidBrush
GetClipBox
GetPixel
AddFontResourceA
AddFontMemResourceEx
SetTextColor
CloseMetaFile
BeginPath
ExtTextOutA
DeleteDC
DeleteObject
ExcludeClipRect
CopyMetaFileA
GetPixel
GetDCOrgEx
ClearBitmapAttributes
AddFontResourceTracking
GetBrushOrgEx
DeleteDC
GetCurrentPositionEx
BeginPath
GetDCOrgEx
AddFontResourceTracking
AddFontResourceExA
GetPixel
ExtTextOutA
AddFontResourceA
CloseFigure
GetBitmapBits
GetPixel
GetClipBox
RestoreDC
AddFontMemResourceEx
AddFontResourceExW
CloseMetaFile
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ