Static task
static1
Behavioral task
behavioral1
Sample
0dfe719ade576fb5340167211c54f001_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0dfe719ade576fb5340167211c54f001_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0dfe719ade576fb5340167211c54f001_JaffaCakes118
-
Size
58KB
-
MD5
0dfe719ade576fb5340167211c54f001
-
SHA1
401cb3a1806a30e60ec4d656cd0dee4a6bec53be
-
SHA256
74658252b5033128adbac3e714196a588fd3b3895b7129c26839e7c17edae15a
-
SHA512
7e9a50cbe1d3816fec3dd6c7ae7cc1e9d74dbefd6c2d17dbdf829e0883614c2003e16c0299ee29b09cb033a544bd50ffda79d5131b83fd12f5f541ea0506866b
-
SSDEEP
768:Pe7sLaRaNCGwnLcMGslbAkn2ixpJBGOu/Mt0G7XYYRNd+1Itkndk4uybu1VFm9vd:GipSLc+AMxpJBsMiCd+SUs3VA9vTfU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dfe719ade576fb5340167211c54f001_JaffaCakes118
Files
-
0dfe719ade576fb5340167211c54f001_JaffaCakes118.exe windows:4 windows x86 arch:x86
50d682798d4e19fb019f0621eba548ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CloseFigure
SetTextColor
GetPixel
AddFontResourceA
AddFontResourceTracking
AbortPath
GetDCOrgEx
GetClipBox
AddFontMemResourceEx
GetCurrentPositionEx
CloseMetaFile
AddFontResourceW
AddFontResourceExW
ExtTextOutA
BitBlt
CancelDC
ClearBitmapAttributes
CreateSolidBrush
DeleteObject
comctl32
ImageList_Merge
ImageList_DrawEx
ImageList_AddIcon
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Destroy
ImageList_Remove
ImageList_BeginDrag
ImageList_DragMove
ImageList_LoadImageA
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_Draw
ImageList_Create
ImageList_Read
ImageList_Merge
ImageList_Read
ImageList_DrawEx
ImageList_DragEnter
ImageList_GetImageInfo
ImageList_Create
ImageList_BeginDrag
ImageList_Replace
ImageList_EndDrag
ImageList_ReplaceIcon
ImageList_AddMasked
InitCommonControls
ImageList_Destroy
ImageList_LoadImage
ImageList_Remove
ImageList_DrawIndirect
ImageList_DragShowNolock
user32
AppendMenuA
GetCursor
CloseWindow
DrawTextW
DrawIcon
AlignRects
BlockInput
CopyIcon
CalcMenuBar
CopyRect
GetMenu
GetDlgItem
IsMenu
CreateIcon
GetDC
CopyImage
GetFocus
LoadCursorA
GetWindowTextLengthA
AppendMenuW
LoadCursorA
GetWindowTextLengthA
EndDialog
CloseWindow
CopyIcon
CopyRect
DrawTextW
DrawIconEx
GetWindowTextA
IsWindow
BlockInput
GetDC
CalcMenuBar
AlignRects
GetMenu
kernel32
GetFileSize
CopyFileExA
DeleteFileA
FindAtomA
GetFileTime
CopyFileW
GetCommandLineA
GlobalFree
OpenFileMappingA
CopyFileA
CreateDirectoryA
FindFirstFileA
GetConsoleMode
GetLastError
SetLastError
CopyFileExW
GetFileSize
GlobalFree
CopyFileExW
ReadConsoleA
SetLastError
GetLastError
OpenFile
CopyFileExA
DeleteFileA
ReadFile
DeleteFileW
CopyFileA
FindFirstFileA
CreateProcessA
CreateThread
CopyFileW
GetCommandLineA
ReadConsoleA
GetComputerNameA
OpenFileMappingA
FindFirstFileA
CreateDirectoryA
CopyFileExW
SetLastError
GetLastError
GetCommandLineA
CopyFileW
ReadFile
CopyFileA
GlobalFree
ExitThread
DeleteFileW
CreateProcessA
GetCPInfo
DeleteFileA
advapi32
RegLoadKeyW
RegCreateKeyExA
RegCreateKeyW
RegFlushKey
RegQueryValueW
RegQueryInfoKeyW
RegOpenKeyA
RegEnumKeyExW
RegQueryInfoKeyA
RegQueryValueA
RegReplaceKeyW
RegOpenKeyExA
RegLoadKeyA
RegOpenKeyW
RegEnumValueA
RegDeleteKeyA
RegEnumKeyExW
RegQueryValueExW
RegLoadKeyA
RegOpenKeyExA
RegEnumKeyW
RegCreateKeyExW
RegQueryInfoKeyA
RegLoadKeyW
RegDeleteValueA
RegCreateKeyW
RegQueryInfoKeyW
RegEnumValueA
RegEnumValueW
RegDeleteKeyW
RegReplaceKeyA
RegOpenKeyW
RegFlushKey
RegQueryValueW
RegCreateKeyExA
RegQueryValueExA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ