Static task
static1
Behavioral task
behavioral1
Sample
2b292d6a69ea0ad795044e1b17f68255_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b292d6a69ea0ad795044e1b17f68255_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b292d6a69ea0ad795044e1b17f68255_JaffaCakes118
-
Size
23KB
-
MD5
2b292d6a69ea0ad795044e1b17f68255
-
SHA1
4e19536f46b819e377d2b1364891fece60917849
-
SHA256
0f05bb42dcc703b3da226a3d442443e1306b6322893b365bb50529ae595ea193
-
SHA512
373fc55ce15f5916146cbdf099aeddd31ff391af39e45ed3a30999d4488cd1c4016b3378065c1057da76f749bfd5e4e4e08ec4a8629470bae5677dc34ae4eb13
-
SSDEEP
384:TznntyrJkkWOA7TxxPRpWN7QWktCUupPE4DGjtjApEN9g4A0pKphXvR0/g:nntyrJpWjTxXpUKd+K0ASFpvR0/g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b292d6a69ea0ad795044e1b17f68255_JaffaCakes118
Files
-
2b292d6a69ea0ad795044e1b17f68255_JaffaCakes118.exe windows:4 windows x86 arch:x86
59d0bc769c1c614f7b98d22c63175860
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetBitmapBits
CloseMetaFile
CancelDC
AddFontResourceExA
GetPixel
GetBrushOrgEx
DeleteObject
CloseFigure
AddFontResourceTracking
GetDCOrgEx
SetTextColor
CopyMetaFileA
AddFontResourceA
GetClipBox
BitBlt
AddFontResourceW
RestoreDC
GetCurrentPositionEx
AddFontResourceExW
ClearBrushAttributes
CreateSolidBrush
ExtTextOutA
AddFontResourceTracking
BitBlt
SetTextColor
DeleteObject
CopyMetaFileA
GetCurrentPositionEx
CloseMetaFile
GetClipBox
CloseFigure
GetPixel
ExcludeClipRect
DeleteDC
RestoreDC
AddFontResourceExW
GetBrushOrgEx
GetBitmapBits
AddFontMemResourceEx
AddFontResourceW
AddFontResourceExA
AddFontResourceW
SetTextColor
GetDCOrgEx
BeginPath
GetBrushOrgEx
DeleteObject
CloseMetaFile
ClearBrushAttributes
RestoreDC
ClearBitmapAttributes
ExtTextOutA
GetBitmapBits
AddFontMemResourceEx
DeleteDC
GetCurrentPositionEx
CreateSolidBrush
advapi32
RegGetKeySecurity
RegOpenKeyW
RegEnumKeyExA
RegQueryValueExW
RegCreateKeyExW
RegCreateKeyW
RegReplaceKeyA
RegDeleteValueA
RegEnumKeyA
RegQueryValueW
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyExW
RegDeleteValueW
RegLoadKeyW
RegQueryValueExA
comctl32
ImageList_EndDrag
ImageList_Create
ImageList_LoadImage
ImageList_GetImageCount
ImageList_Remove
ImageList_GetIconSize
ImageList_DragMove
ImageList_GetImageInfo
ImageList_DragLeave
ImageList_GetDragImage
ImageList_Replace
ImageList_DrawEx
ImageList_DragEnter
ImageList_DrawIndirect
ImageList_Merge
ImageList_GetIcon
ImageList_AddIcon
ImageList_BeginDrag
ImageList_Draw
ImageList_DragShowNolock
ImageList_GetIcon
ImageList_Read
ImageList_LoadImage
ImageList_Create
ImageList_EndDrag
ImageList_DragLeave
ImageList_GetImageRect
ImageList_GetImageCount
ImageList_Draw
ImageList_LoadImageA
ImageList_AddMasked
ImageList_GetDragImage
ImageList_Copy
ImageList_Remove
ImageList_GetImageInfo
InitCommonControls
user32
IsMenu
GetWindowTextLengthA
GetDC
InsertMenuA
LoadMenuA
CreateIcon
DialogBoxParamW
CloseWindow
CopyIcon
GetDlgItem
DialogBoxParamA
AppendMenuA
CopyImage
DrawTextA
EndDialog
GetMenu
CopyRect
DrawTextW
GetFocus
IsWindow
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ