Static task
static1
Behavioral task
behavioral1
Sample
292d90eeb5c769e6bf311750c7c0402f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
292d90eeb5c769e6bf311750c7c0402f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
292d90eeb5c769e6bf311750c7c0402f_JaffaCakes118
-
Size
67KB
-
MD5
292d90eeb5c769e6bf311750c7c0402f
-
SHA1
626e59f311efa0850065cccade7d4a53e94bbf84
-
SHA256
cca551648af572addb030eb66b2ac1e617380232c917479bcd2c0db225507202
-
SHA512
36c4b0268606d1750be0bb9d1e42d681b33ba88d12849e2431d4667bff41bf2133c9453cce3d427e5c6adda34331e3245bfe32c94829b114c6fc8a3c3cc9542d
-
SSDEEP
1536:7yZ59StJ35h7hAf1Bh9FR4B82UkACKM/9TNRXaHtSBe:mZ58HpRhAfTD4hFB1TNt4N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 292d90eeb5c769e6bf311750c7c0402f_JaffaCakes118
Files
-
292d90eeb5c769e6bf311750c7c0402f_JaffaCakes118.exe windows:4 windows x86 arch:x86
427b184c6e959653660a5729fa0783f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
MenuHelp
CreateStatusWindowW
DrawStatusTextW
ImageList_Copy
ImageList_AddIcon
ImageList_GetIconSize
advapi32
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegQueryValueA
RegQueryValueW
gdi32
GetBitmapBits
CreateDIBSection
CreatePenIndirect
ExtTextOutA
CreateDIBitmap
CreateBitmap
ExcludeClipRect
GetClipBox
CreateHalftonePalette
DeleteDC
user32
CopyIcon
EndDialog
DialogBoxParamA
DrawTextW
GetWindowTextLengthA
GetDlgItem
LoadCursorA
InsertMenuA
GetDC
DrawIconEx
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 25B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 987B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bbs Size: 512B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ