Static task
static1
Behavioral task
behavioral1
Sample
0ec135d5c953c6465c8227922b8c167e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ec135d5c953c6465c8227922b8c167e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ec135d5c953c6465c8227922b8c167e_JaffaCakes118
-
Size
225KB
-
MD5
0ec135d5c953c6465c8227922b8c167e
-
SHA1
1591c8e1dcae0185b94ed79152e8c996e7fb9112
-
SHA256
0fc249cf6272a540ee952f5c7782ddd8ae05095422568a72bacc0608d4caedc5
-
SHA512
b85a05f5a19ed31a4556de62c2e325e20292c8d81385d02210f1ca0c997aa69a2ac93b4d17f56e02ffe6ab7520e3c2c098533f9e21d74ee31919e69e2b0f8a39
-
SSDEEP
6144:Y7z5EnMLCtpkMVWS/IwimSwNTEqh+k/jrBYR8cS3Itr74c:whLmpkYWGINm1h+s5qS4R74c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ec135d5c953c6465c8227922b8c167e_JaffaCakes118
Files
-
0ec135d5c953c6465c8227922b8c167e_JaffaCakes118.exe windows:4 windows x86 arch:x86
b0943468ecf1ffe265fe90e6f61608e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyA
RegCreateKeyExW
RegDeleteKeyW
RegEnumValueW
RegOpenKeyW
RegQueryValueExA
RegQueryValueExW
RegQueryValueW
RegSetValueExW
RegSetValueW
kernel32
CloseHandle
CreateFileMappingW
CreateFileW
EnterCriticalSection
ExitProcess
InitializeCriticalSection
LeaveCriticalSection
MapViewOfFile
ReadFile
SetFilePointer
SetUnhandledExceptionFilter
UnmapViewOfFile
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
realloc
signal
sprintf
sscanf
strcpy
wcscpy
user32
AdjustWindowRectEx
BeginPaint
BringWindowToTop
CallWindowProcW
ChangeDisplaySettingsW
CloseClipboard
CopyRect
CreateDialogIndirectParamW
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefWindowProcW
DestroyCursor
DestroyMenu
DestroyWindow
DispatchMessageW
DrawEdge
DrawIconEx
DrawStateW
EmptyClipboard
EnableWindow
EndPaint
EnumDisplaySettingsW
FlashWindow
GetActiveWindow
GetAsyncKeyState
GetCapture
GetClassInfoW
GetClassNameW
GetClipboardData
GetClipboardFormatNameW
GetDC
GetDlgItem
GetForegroundWindow
GetMenuItemCount
GetMenuItemInfoW
GetMenuStringW
GetMessagePos
GetMessageW
GetParent
GetSubMenu
GetSysColor
GetSystemMetrics
GetUpdateRect
GetWindow
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
HideCaret
InvalidateRect
IsDialogMessageW
IsWindow
IsWindowVisible
LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
MapWindowPoints
MessageBeep
MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RegisterClassW
ReleaseCapture
ReleaseDC
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetForegroundWindow
SetWindowRgn
SetWindowTextW
ShowCaret
ShowCursor
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnionRect
UnregisterClassW
UpdateWindow
WaitForInputIdle
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 34KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ