Static task
static1
Behavioral task
behavioral1
Sample
2cd4d28911a9491a11efd744e21d1d82_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2cd4d28911a9491a11efd744e21d1d82_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cd4d28911a9491a11efd744e21d1d82_JaffaCakes118
-
Size
1.4MB
-
MD5
2cd4d28911a9491a11efd744e21d1d82
-
SHA1
4560703ac07c2bcfa85f42ed658cb83e63d99389
-
SHA256
9e6b3c3c0cd5b35d58b0e821281d4c6ddcf4732c43451be99245af59b52a7137
-
SHA512
6aab9acb815ba2b9a2bf8657507a2dab5345e69eca8529e46529821ffb67233ba55147fa4d3c3f5fde75f9e0171f079bbe0eb7c8ba7888571e678c9d517c8aa5
-
SSDEEP
24576:xpcWZwwCT+BicU6jxI/3oT507dJiJluQiWF2wmhTiE:nFe+BtU6K45adgPuQiWkpe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cd4d28911a9491a11efd744e21d1d82_JaffaCakes118
Files
-
2cd4d28911a9491a11efd744e21d1d82_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f46cce8b95746437c8a0bfbfd99f071
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegLoadKeyA
RegDeleteValueW
RegOpenKeyExW
RegLoadKeyW
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExW
RegGetKeySecurity
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExA
RegEnumKeyExW
RegDeleteValueW
RegGetKeySecurity
RegEnumKeyExW
RegEnumKeyW
RegEnumValueW
RegFlushKey
RegQueryInfoKeyW
RegOpenKeyA
RegDeleteKeyW
RegQueryInfoKeyA
RegDeleteValueA
RegLoadKeyW
RegCreateKeyW
RegCreateKeyExW
RegEnumValueW
RegDeleteValueA
RegQueryValueA
RegDeleteValueW
RegQueryInfoKeyW
RegQueryValueExA
RegDeleteKeyA
RegGetKeySecurity
RegReplaceKeyA
RegQueryValueW
RegEnumKeyA
RegLoadKeyA
RegReplaceKeyW
RegEnumKeyExW
RegEnumValueW
RegDeleteKeyW
RegQueryValueA
RegDeleteValueW
RegDeleteValueA
RegQueryValueExW
RegLoadKeyA
RegOpenKeyW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyExW
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueA
RegCreateKeyExA
RegQueryInfoKeyW
RegQueryValueExA
RegCreateKeyExW
RegEnumKeyExW
RegGetKeySecurity
RegOpenKeyA
RegReplaceKeyA
RegOpenKeyExW
RegEnumValueA
RegCreateKeyExW
RegQueryValueW
RegDeleteValueW
RegQueryValueA
RegEnumKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegFlushKey
RegEnumKeyExW
RegCreateKeyW
RegQueryInfoKeyW
RegOpenKeyA
RegDeleteValueA
RegQueryInfoKeyW
RegLoadKeyA
RegOpenKeyW
RegLoadKeyW
RegCreateKeyExW
RegEnumKeyW
RegEnumValueA
RegQueryValueW
RegGetKeySecurity
user32
CloseWindow
GetFocus
EndDialog
DrawTextW
CopyIcon
GetDC
CopyImage
AppendMenuA
GetCursor
DialogBoxParamW
GetCursor
GetWindowTextA
GetDlgItem
AlignRects
IsWindow
GetMenu
GetFocus
DrawIcon
AppendMenuA
InsertMenuA
DialogBoxParamW
DrawTextA
LoadMenuA
comctl32
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_Copy
ImageList_Remove
ImageList_Draw
ImageList_DrawIndirect
ImageList_AddIcon
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_EndDrag
ImageList_BeginDrag
ImageList_LoadImageW
ImageList_Merge
ImageList_GetIcon
ImageList_Create
ImageList_DragEnter
ImageList_Replace
kernel32
ExitThread
CreateDirectoryA
CopyFileA
DeleteFileA
CopyFileExA
GlobalFree
CreateProcessA
ReadConsoleA
DeleteAtom
FindAtomA
GetFileTime
gdi32
ClearBrushAttributes
AddFontResourceTracking
CopyMetaFileA
BeginPath
AddFontResourceExW
GetDCOrgEx
GetCurrentPositionEx
AddFontResourceA
SetTextColor
GetPixel
Sections
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.2MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 725B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ