Static task
static1
Behavioral task
behavioral1
Sample
2df4e9c6c0ae678c47f0d9b8769551da_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2df4e9c6c0ae678c47f0d9b8769551da_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2df4e9c6c0ae678c47f0d9b8769551da_JaffaCakes118
-
Size
32KB
-
MD5
2df4e9c6c0ae678c47f0d9b8769551da
-
SHA1
8c26f9f38bc44819fcfe1fbc530c374ec69a5cf7
-
SHA256
d9dc3ed1e82a41d48c7c8b69068f32fbb28c92ee07468b07d147afd79704a491
-
SHA512
5410754c43f7cfc61cfbdf3b39ef517d7f2fff40d7f810f543475ccc267e2369a1f14475acfec69d6f0dea630f41242b373d608803b961eea3e5aef74995f41c
-
SSDEEP
768:FNj1/pZy1TLITHJhUEVli8joa+Xde8QMuU5+1H:x/pZcIJhUESXcbnL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2df4e9c6c0ae678c47f0d9b8769551da_JaffaCakes118
Files
-
2df4e9c6c0ae678c47f0d9b8769551da_JaffaCakes118.exe windows:4 windows x86 arch:x86
0360d1680f0782f06c5e25d5788ca96a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueA
RegLoadKeyW
RegOpenKeyExW
RegEnumKeyA
RegQueryInfoKeyW
RegGetKeySecurity
RegCreateKeyExA
RegReplaceKeyW
RegLoadKeyA
RegEnumKeyExW
RegEnumKeyW
RegCreateKeyW
RegFlushKey
RegOpenKeyExA
RegQueryValueW
RegReplaceKeyA
RegCreateKeyExW
RegDeleteKeyA
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyExA
RegEnumValueW
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyExW
RegEnumKeyExA
RegLoadKeyW
RegOpenKeyExW
RegOpenKeyA
RegDeleteKeyA
RegOpenKeyExA
RegReplaceKeyW
RegReplaceKeyA
RegDeleteKeyW
RegEnumKeyW
RegDeleteValueW
RegCreateKeyW
RegGetKeySecurity
RegQueryInfoKeyW
RegEnumKeyA
RegQueryValueExA
RegQueryValueExW
comctl32
ImageList_GetImageCount
InitCommonControls
ImageList_DragEnter
ImageList_DrawEx
ImageList_GetDragImage
ImageList_AddMasked
ImageList_Remove
ImageList_Merge
ImageList_Create
ImageList_AddIcon
ImageList_EndDrag
ImageList_GetImageRect
ImageList_Read
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_Copy
ImageList_DragMove
ImageList_LoadImageA
ImageList_Draw
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Create
ImageList_Merge
ImageList_GetImageCount
ImageList_Draw
ImageList_Destroy
ImageList_Copy
ImageList_LoadImageA
ImageList_LoadImage
ImageList_DrawEx
ImageList_Read
ImageList_GetIconSize
ImageList_Replace
ImageList_GetDragImage
ImageList_AddMasked
ImageList_Remove
ImageList_DrawIndirect
ImageList_GetIcon
ImageList_Destroy
ImageList_BeginDrag
ImageList_Draw
ImageList_GetImageCount
ImageList_Create
ImageList_DragShowNolock
ImageList_DragLeave
ImageList_DragEnter
ImageList_LoadImage
ImageList_AddMasked
ImageList_Remove
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_LoadImageA
InitCommonControls
ImageList_Read
ImageList_GetImageRect
ImageList_DrawIndirect
ImageList_Replace
ImageList_DragMove
ImageList_EndDrag
kernel32
CreateThread
CreateProcessA
GetFileSize
WriteFile
FindFirstFileA
GetFileTime
CreateDirectoryA
GetCPInfo
CopyFileA
Sleep
OpenFile
CopyFileExW
DeleteFileA
GetConsoleMode
GetStdHandle
GlobalFree
CopyFileExA
ExitThread
ReadConsoleA
GetLastError
ReadFile
CopyFileW
DeleteFileW
FindAtomA
user32
CopyImage
DrawIconEx
GetCursor
LoadMenuA
InsertMenuA
DrawTextA
DialogBoxParamA
EndDialog
IsWindow
AppendMenuW
CalcMenuBar
CopyRect
AlignRects
DrawTextW
GetFocus
GetWindowTextA
DrawIcon
CopyIcon
BlockInput
GetWindowTextLengthA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ