Static task
static1
Behavioral task
behavioral1
Sample
231c5f12c03fc123ac7318f0c3aec9e8_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
231c5f12c03fc123ac7318f0c3aec9e8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
231c5f12c03fc123ac7318f0c3aec9e8_JaffaCakes118
-
Size
225KB
-
MD5
231c5f12c03fc123ac7318f0c3aec9e8
-
SHA1
0913f6b6f7af24335fbd80d24c8bca8728fab441
-
SHA256
dc52c5947aeb1622bb4c4644ea933b15a0837cb92c3b946699fed1c7f0d0b5e5
-
SHA512
8a522f75b85ca598df5173831f2e5f4d33509e3553cf8e046cea41b4661ce33b5a4dd0db8def35bcead400699af292e2c3615fa00474d4c10b02d221ff6cc30a
-
SSDEEP
3072:B1Iw6ayx73OTPPx4REAYyXOGk0/9+zpM54Z6pz7U0PIOgcFv8b9pv15RZfzB0:sw6aYbQPiRSygNMG+k0PIOgcCZpb+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 231c5f12c03fc123ac7318f0c3aec9e8_JaffaCakes118
Files
-
231c5f12c03fc123ac7318f0c3aec9e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
358020b2cc4815caa4e0f7683b8d3770
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteFileW
ReadConsoleA
OpenFile
GetStdHandle
CopyFileExA
FindFirstFileA
WriteFile
ExitThread
Sleep
GetComputerNameA
CreateProcessA
CopyFileW
GetLastError
GetCommandLineA
DeleteFileA
ReadFile
DeleteAtom
GetCPInfo
advapi32
RegLoadKeyW
RegReplaceKeyA
RegDeleteKeyW
RegDeleteValueW
RegQueryValueW
RegOpenKeyW
RegGetKeySecurity
RegEnumValueW
RegEnumKeyW
RegOpenKeyExA
RegQueryValueExW
RegDeleteKeyA
RegEnumKeyExW
RegEnumKeyA
RegReplaceKeyW
RegEnumKeyW
RegOpenKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueA
RegEnumKeyA
RegDeleteValueW
RegLoadKeyA
RegCreateKeyW
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryInfoKeyW
RegGetKeySecurity
RegFlushKey
RegEnumKeyExA
RegEnumKeyExW
RegDeleteKeyW
user32
LoadMenuA
LoadCursorA
DrawTextW
CopyRect
GetMenu
GetWindowTextLengthA
DialogBoxParamA
CreateIcon
AlignRects
GetDC
LoadMenuA
AppendMenuA
IsMenu
CopyImage
AlignRects
AppendMenuW
BlockInput
DrawTextW
DrawIconEx
DrawIcon
IsWindow
CreateIcon
GetFocus
DialogBoxParamW
CopyIcon
CalcMenuBar
gdi32
AddFontResourceExA
GetPixel
GetCurrentPositionEx
CloseMetaFile
RestoreDC
DeleteDC
DeleteObject
SetTextColor
ClearBrushAttributes
ExtTextOutA
CancelDC
ExcludeClipRect
AddFontMemResourceEx
CreateSolidBrush
AddFontResourceExW
CloseFigure
GetDCOrgEx
GetBitmapBits
AddFontResourceA
GetClipBox
ClearBitmapAttributes
ExtTextOutA
GetBrushOrgEx
BitBlt
CancelDC
CopyMetaFileA
DeleteObject
AddFontMemResourceEx
CreateSolidBrush
SetTextColor
AddFontResourceExW
CloseMetaFile
AddFontResourceExA
AddFontResourceExW
CreateSolidBrush
AddFontResourceA
GetPixel
AddFontMemResourceEx
ClearBitmapAttributes
SetTextColor
BeginPath
GetBitmapBits
AddFontResourceW
ClearBrushAttributes
DeleteObject
AbortPath
CancelDC
CloseFigure
comctl32
ImageList_GetImageCount
ImageList_EndDrag
ImageList_Draw
ImageList_Create
ImageList_Merge
ImageList_LoadImage
ImageList_Read
ImageList_GetImageInfo
ImageList_GetDragImage
ImageList_BeginDrag
ImageList_ReplaceIcon
ImageList_DragLeave
ImageList_DrawEx
ImageList_GetIconSize
InitCommonControls
ImageList_DrawIndirect
ImageList_DragMove
ImageList_LoadImageW
ImageList_GetIcon
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 55B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ