Static task
static1
Behavioral task
behavioral1
Sample
102a5d84326cdcaa0d610c819a041575_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
102a5d84326cdcaa0d610c819a041575_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
102a5d84326cdcaa0d610c819a041575_JaffaCakes118
-
Size
110KB
-
MD5
102a5d84326cdcaa0d610c819a041575
-
SHA1
10b5f74e17b1d7bb986252b914c9a6d7cbc01f29
-
SHA256
d2d3c86f42dcf97fbf590631852dee26cb42b4f3e3e8d55e41cf07cdc70edfa9
-
SHA512
453c9b973d31437816af7f799c00ff1168157333b9a64128d8ecf1b7c3a152c8b6e94fa4bd0a002379523ed203083460465c53c208b2f0bd8c88dd3cdfcdf8ab
-
SSDEEP
1536:AQ8wC2zkGeEM6c25cZtak96qdA5zGD6UiKzR+fFZ35s371X5Hi/TT8KxUQ/rp5iO:AQ8p/rEzd53k96XzGWEo6JCr9CQ/rmO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 102a5d84326cdcaa0d610c819a041575_JaffaCakes118
Files
-
102a5d84326cdcaa0d610c819a041575_JaffaCakes118.exe windows:4 windows x86 arch:x86
dcc2493beb88bbc7038c9675a3571790
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextLengthA
GetFocus
DrawTextW
GetDlgItem
DialogBoxParamW
CreateIcon
EndDialog
LoadCursorA
CalcMenuBar
AppendMenuA
AppendMenuW
GetWindowTextA
DialogBoxParamA
AlignRects
BlockInput
LoadMenuA
CopyRect
DrawIcon
CloseWindow
InsertMenuA
GetCursor
GetDC
CalcMenuBar
GetMenu
CopyRect
DialogBoxParamW
CopyIcon
DrawTextA
LoadMenuA
CreateIcon
DrawTextW
GetWindowTextA
DrawIconEx
GetFocus
GetDlgItem
DrawIcon
advapi32
RegEnumValueA
RegReplaceKeyA
RegOpenKeyW
RegEnumKeyA
RegCreateKeyW
RegLoadKeyA
RegOpenKeyExW
RegDeleteKeyA
RegQueryValueA
RegEnumKeyW
RegFlushKey
RegEnumValueW
RegReplaceKeyW
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyExW
RegCreateKeyExA
RegDeleteValueA
RegCreateKeyExW
kernel32
GetModuleHandleA
GetLastError
GetFileType
GetCommandLineA
lstrcpynA
GetDateFormatA
GetStringTypeA
HeapAlloc
GlobalAlloc
lstrcmpiA
lstrcmpA
lstrcatA
GetFileSize
WideCharToMultiByte
GlobalFree
Sleep
GetLocalTime
GetCPInfo
comctl32
ImageList_DragShowNolock
ImageList_LoadImageA
ImageList_Draw
InitCommonControls
ImageList_AddIcon
ImageList_GetImageCount
ImageList_LoadImage
ImageList_DrawEx
ImageList_DragEnter
ImageList_DrawIndirect
ImageList_GetImageRect
ImageList_GetIconSize
ImageList_Merge
ImageList_DragLeave
ImageList_Destroy
ImageList_Replace
ImageList_DragMove
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bdata Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ