Static task
static1
Behavioral task
behavioral1
Sample
32244e7834869676461a84285307066f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32244e7834869676461a84285307066f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32244e7834869676461a84285307066f_JaffaCakes118
-
Size
140KB
-
MD5
32244e7834869676461a84285307066f
-
SHA1
96739fe3f657a3b7263b81d531f37dee711dc01e
-
SHA256
1153237391aeca2800d6ed922769f32bca25cf0de8786079e450e718d11f195f
-
SHA512
bd27d491b4ca7c6e3fc96f932058a5f39c5c505a6c9a8a81fe639568c76c8154edcaca6022c054c27848c63578be0ec25f2b91a135f5eef8f04ad96f4917b2c4
-
SSDEEP
3072:G6VqPkTqY9mnU+ekppimGV5c+OSIg/dQ/tQF:G64P4qY9mn7Yc+OSzeA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32244e7834869676461a84285307066f_JaffaCakes118
Files
-
32244e7834869676461a84285307066f_JaffaCakes118.exe windows:4 windows x86 arch:x86
0032bdb2e8c5e3a4e5c3c3b23ef871e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueA
RegEnumKeyW
RegOpenKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegGetKeySecurity
RegCreateKeyW
RegFlushKey
RegCreateKeyExW
RegOpenKeyExA
RegDeleteValueW
RegQueryValueExA
RegOpenKeyExW
RegDeleteKeyA
RegEnumValueA
RegEnumKeyA
RegCreateKeyExA
RegReplaceKeyA
RegLoadKeyA
RegDeleteKeyW
RegOpenKeyA
RegEnumValueW
RegEnumKeyExA
RegReplaceKeyW
RegQueryValueW
RegQueryInfoKeyA
RegLoadKeyW
RegQueryValueExW
RegDeleteValueA
RegQueryInfoKeyA
RegFlushKey
RegDeleteValueW
RegEnumValueA
RegOpenKeyExA
RegQueryInfoKeyW
RegQueryValueW
RegEnumKeyExA
RegEnumKeyW
RegGetKeySecurity
RegEnumKeyA
RegOpenKeyExW
RegCreateKeyW
RegQueryValueExW
RegDeleteKeyA
RegCreateKeyExA
RegLoadKeyA
RegCreateKeyExW
RegOpenKeyA
RegOpenKeyW
RegLoadKeyW
RegDeleteKeyW
RegQueryValueA
RegEnumKeyExW
RegReplaceKeyA
RegQueryValueExA
RegReplaceKeyW
RegDeleteValueA
RegEnumValueW
user32
AlignRects
GetFocus
DialogBoxParamW
BlockInput
DrawTextW
IsWindow
CopyImage
IsMenu
GetWindowTextLengthA
DialogBoxParamA
DrawTextA
DrawIconEx
CreateIcon
CopyRect
LoadMenuA
CalcMenuBar
AppendMenuW
CopyIcon
GetDlgItem
InsertMenuA
GetDC
LoadCursorA
AppendMenuA
GetWindowTextA
DrawIcon
CloseWindow
EndDialog
GetMenu
GetCursor
EndDialog
CopyImage
AppendMenuA
InsertMenuA
LoadMenuA
CopyRect
DialogBoxParamW
GetDC
IsMenu
CopyIcon
LoadCursorA
GetDlgItem
CreateIcon
DrawIconEx
DrawTextA
GetCursor
AppendMenuW
GetWindowTextLengthA
DialogBoxParamA
DrawTextW
GetWindowTextA
CloseWindow
DrawIcon
GetFocus
GetMenu
AlignRects
CalcMenuBar
BlockInput
IsWindow
kernel32
CloseHandle
lstrlenA
CloseHandle
ExitProcess
CloseHandle
GetModuleHandleA
CloseHandle
Sleep
CloseHandle
GetFileType
CloseHandle
lstrcpyA
CloseHandle
GetModuleFileNameA
CloseHandle
FreeLibrary
CloseHandle
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rddta Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 9KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rddoc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idaaa Size: 1024B - Virtual size: 2KB
IMAGE_SCN_MEM_READ