Static task
static1
Behavioral task
behavioral1
Sample
36d2dc049274a14461088ff59df7e3c8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36d2dc049274a14461088ff59df7e3c8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36d2dc049274a14461088ff59df7e3c8_JaffaCakes118
-
Size
180KB
-
MD5
36d2dc049274a14461088ff59df7e3c8
-
SHA1
adffe2e3ed44c558a8127b44f1b71d589ecacb85
-
SHA256
20d45ead597a09c49c4cb00333e01f93f2d1c98c5654ee125093b2af0b707498
-
SHA512
ca413dcc31aa766cfeb530dc6e7832af98609c24811aeaa79db5b57364289f90895a53cfa2c251574fce816d715dbdda70ca28ce3f911f61b8f45231342b5b39
-
SSDEEP
3072:kKxeoew9QZHaMhSbuAO78y43xtE+la7Voa:JxeBzaMYbrOO3Ihoa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36d2dc049274a14461088ff59df7e3c8_JaffaCakes118
Files
-
36d2dc049274a14461088ff59df7e3c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
7df8a3aaa41595e26d79c0cf0274f2bb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyImage
EndDialog
CreateIcon
GetWindowTextLengthA
GetFocus
AppendMenuW
IsWindow
DrawIcon
GetWindowTextA
AppendMenuA
CopyRect
DialogBoxParamA
CalcMenuBar
DrawTextA
BlockInput
InsertMenuA
advapi32
RegQueryInfoKeyA
RegDeleteValueW
RegLoadKeyA
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyExW
RegEnumKeyA
RegLoadKeyW
RegQueryValueW
RegEnumKeyW
RegDeleteValueA
RegOpenKeyExW
RegCreateKeyExA
RegOpenKeyW
RegGetKeySecurity
RegEnumValueW
RegOpenKeyExA
RegDeleteValueW
RegEnumValueW
RegQueryValueExA
RegQueryValueA
RegCreateKeyExA
RegLoadKeyW
RegGetKeySecurity
RegEnumKeyExW
RegDeleteKeyW
RegReplaceKeyW
RegFlushKey
RegQueryValueW
RegOpenKeyA
RegEnumValueA
RegEnumKeyW
RegDeleteKeyA
RegOpenKeyExW
RegEnumKeyExA
RegDeleteValueA
comctl32
ImageList_Copy
ImageList_Read
ImageList_LoadImage
ImageList_LoadImageA
ImageList_BeginDrag
ImageList_EndDrag
ImageList_Destroy
ImageList_LoadImageW
ImageList_Draw
ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_DragLeave
ImageList_AddIcon
ImageList_GetIconSize
ImageList_DrawEx
ImageList_GetDragImage
ImageList_Read
ImageList_GetImageRect
ImageList_GetIconSize
ImageList_DragMove
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageA
ImageList_Create
ImageList_AddIcon
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_DragEnter
ImageList_DrawIndirect
ImageList_GetImageInfo
ImageList_Draw
ImageList_LoadImageW
ImageList_EndDrag
ImageList_Destroy
ImageList_Remove
ImageList_DrawEx
kernel32
SetLastError
CreateDirectoryA
CopyFileW
OpenFile
GetComputerNameA
GetLastError
GetConsoleMode
DeleteFileW
GetFileSize
CopyFileA
DeleteAtom
DeleteFileA
Sleep
ExitThread
ReadFile
GetStdHandle
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.fdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bbs Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ldata Size: 120KB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: 4KB - Virtual size: 179B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ