Static task
static1
Behavioral task
behavioral1
Sample
2efc88afc9d653155a2a3b3632cc29b8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2efc88afc9d653155a2a3b3632cc29b8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2efc88afc9d653155a2a3b3632cc29b8_JaffaCakes118
-
Size
42KB
-
MD5
2efc88afc9d653155a2a3b3632cc29b8
-
SHA1
a2718360073762b95f98b0692434f764586e5569
-
SHA256
dad4f1308390d570e0845154a0bb8f667b53c8f7f6fa2fbe538effded54d1176
-
SHA512
a8b02ec4cef9ed4a41bd586a95561520f75a2e73f0b62e4d7d9413e37007ea7f22dde43befbc167c0f15195f4060e6ed14ce9d849a8285c5dfa3efa549ae64c1
-
SSDEEP
768:TR+bfmOOJa9Vc91ywOJKCBWZcpfItOKo3:UbX+9TRIq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2efc88afc9d653155a2a3b3632cc29b8_JaffaCakes118
Files
-
2efc88afc9d653155a2a3b3632cc29b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
d3adb59d152bb3f23793f861770beab9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_LoadImageW
ImageList_GetDragImage
ImageList_Destroy
InitCommonControls
ImageList_DragMove
ImageList_AddMasked
ImageList_GetIcon
ImageList_AddIcon
ImageList_Merge
ImageList_EndDrag
ImageList_Replace
ImageList_LoadImage
ImageList_Read
ImageList_Create
ImageList_DragShowNolock
ImageList_LoadImageA
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_DrawIndirect
ImageList_GetImageRect
ImageList_GetImageInfo
ImageList_Draw
ImageList_EndDrag
ImageList_Destroy
ImageList_Create
ImageList_LoadImageW
ImageList_DragShowNolock
ImageList_DragMove
ImageList_AddIcon
ImageList_Copy
ImageList_GetIconSize
ImageList_LoadImageA
ImageList_LoadImage
ImageList_GetDragImage
InitCommonControls
ImageList_Replace
ImageList_Merge
ImageList_Read
ImageList_Draw
ImageList_LoadImageA
ImageList_Copy
InitCommonControls
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_Replace
ImageList_BeginDrag
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_LoadImageW
ImageList_Merge
ImageList_Destroy
ImageList_EndDrag
ImageList_GetIconSize
ImageList_DrawIndirect
ImageList_Create
ImageList_AddMasked
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Destroy
ImageList_DragLeave
ImageList_AddIcon
ImageList_Copy
ImageList_Create
ImageList_GetDragImage
ImageList_DrawIndirect
ImageList_Draw
ImageList_Merge
ImageList_Read
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_Replace
ImageList_LoadImage
ImageList_DrawEx
ImageList_GetImageCount
InitCommonControls
ImageList_BeginDrag
ImageList_Remove
ImageList_Destroy
ImageList_Draw
ImageList_LoadImageA
ImageList_DragEnter
ImageList_AddMasked
ImageList_DragLeave
ImageList_GetImageRect
ImageList_LoadImage
ImageList_DragShowNolock
ImageList_Replace
ImageList_DragMove
ImageList_DrawIndirect
ImageList_BeginDrag
ImageList_Remove
ImageList_Merge
ImageList_Read
ImageList_ReplaceIcon
ImageList_GetImageCount
user32
IsMenu
GetDlgItem
CopyImage
CreateIcon
AppendMenuA
DialogBoxParamW
DialogBoxParamA
LoadCursorA
EndDialog
GetMenu
GetFocus
GetWindowTextA
GetCursor
CopyIcon
DrawIconEx
IsWindow
AppendMenuW
advapi32
RegDeleteValueA
RegLoadKeyA
RegDeleteKeyA
RegEnumValueA
RegCreateKeyW
RegEnumKeyExW
RegQueryValueExA
RegQueryValueExW
RegCreateKeyExA
RegReplaceKeyA
RegOpenKeyExW
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueW
RegFlushKey
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumKeyExA
RegGetKeySecurity
RegOpenKeyExA
RegReplaceKeyA
RegOpenKeyA
RegEnumValueW
RegQueryInfoKeyW
RegQueryValueExA
RegFlushKey
RegEnumKeyW
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyExW
RegQueryValueW
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegLoadKeyW
RegDeleteValueW
RegCreateKeyW
gdi32
CreateSolidBrush
GetCurrentPositionEx
SetTextColor
BitBlt
CancelDC
AddFontResourceW
DeleteDC
GetBrushOrgEx
DeleteObject
AbortPath
GetClipBox
CloseFigure
AddFontResourceTracking
ExcludeClipRect
AddFontResourceExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ