Static task
static1
Behavioral task
behavioral1
Sample
30263307333e3ffd3d7b3bf5b74f203c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
30263307333e3ffd3d7b3bf5b74f203c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30263307333e3ffd3d7b3bf5b74f203c_JaffaCakes118
-
Size
80KB
-
MD5
30263307333e3ffd3d7b3bf5b74f203c
-
SHA1
650fcaba402fcbba97628adb72b4025fdb148590
-
SHA256
948a9d387d672dfed5e8d7ac425a9e996e4d96eb908b9a36bedcde48aced08e0
-
SHA512
db65053eb908ccaf556a538478f7f2e493a397cf4c2dd4c2a9bdfc5b551a70665a2063b6515fd10cacbabbbf159156131d42f4285407ddaab02d7223f7bc8420
-
SSDEEP
768:UXrkTYpmO1hXL+tUbRtIvyGlNaxp9kEqiv6WFRrnahM7EjX+gtgtmG7wzcUx:E+KXpVtIvykanf1JAz1tgtmgs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30263307333e3ffd3d7b3bf5b74f203c_JaffaCakes118
Files
-
30263307333e3ffd3d7b3bf5b74f203c_JaffaCakes118.exe windows:4 windows x86 arch:x86
d265931166e8268eebe484b3bf5e3385
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawTextA
GetFocus
LoadMenuA
DrawIcon
DialogBoxParamW
DrawIconEx
AlignRects
InsertMenuA
GetDlgItem
CreateIcon
GetMenu
GetCursor
DrawIconEx
CopyImage
BlockInput
GetWindowTextA
EndDialog
DialogBoxParamA
CopyRect
AlignRects
GetWindowTextLengthA
DialogBoxParamW
CalcMenuBar
gdi32
CancelDC
DeleteObject
RestoreDC
GetPixel
GetDCOrgEx
GetBitmapBits
AddFontResourceExW
GetBrushOrgEx
GetClipBox
AddFontResourceExA
GetPixel
BeginPath
ClearBitmapAttributes
advapi32
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegReplaceKeyA
RegEnumKeyExA
RegDeleteValueW
RegQueryValueExA
RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegReplaceKeyW
RegQueryValueExW
RegEnumKeyA
RegCreateKeyW
RegDeleteValueW
RegGetKeySecurity
RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA
RegOpenKeyA
RegCreateKeyExW
comctl32
ImageList_GetImageCount
ImageList_DragLeave
ImageList_Remove
ImageList_ReplaceIcon
ImageList_DragEnter
ImageList_Replace
ImageList_DrawIndirect
ImageList_Copy
ImageList_DrawEx
ImageList_GetImageRect
ImageList_EndDrag
ImageList_GetIcon
ImageList_GetIconSize
ImageList_LoadImageA
ImageList_Read
ImageList_Remove
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_AddIcon
ImageList_Destroy
ImageList_LoadImage
ImageList_DragMove
ImageList_LoadImageW
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_DragLeave
ImageList_Draw
ImageList_Merge
kernel32
ReadFile
CreateProcessA
GetConsoleMode
CopyFileExW
GetCommandLineA
WriteFile
ReadConsoleA
GetCPInfo
GetFileSize
DeleteFileW
DeleteAtom
Sleep
CopyFileW
FindAtomA
OpenFileMappingA
CopyFileExA
GetStdHandle
DeleteFileA
ExitThread
ExitThread
CopyFileExA
GetCPInfo
OpenFile
DeleteFileA
CreateThread
OpenFileMappingA
CreateDirectoryA
DeleteFileW
SetLastError
WriteFile
GetFileTime
GetLastError
CreateProcessA
FindAtomA
CopyFileA
CopyFileExW
GetStdHandle
CopyFileW
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ