Static task
static1
Behavioral task
behavioral1
Sample
3629ba166d05f944110c437414948027_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3629ba166d05f944110c437414948027_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3629ba166d05f944110c437414948027_JaffaCakes118
-
Size
97KB
-
MD5
3629ba166d05f944110c437414948027
-
SHA1
3cb4acbaac11b131a75e875c16007ae30a4e0d6d
-
SHA256
10c5699ce2308ff193430cb1aea14272c132bc7650ad1ada6411eeb4c7150d0a
-
SHA512
c6440b1c60f9d18386c5e0156c0eef45119a3f43d8c8720b78be8310db21bafa86cb9ff0c52410fa144ead407c7ec0d0a704d4cdfcec783a049cfba31869c99d
-
SSDEEP
1536:iMCob/kI3QXgwlETFeEMbbHhNicme4Ghwu4HHy8viyfZwNWEkl0gRX:iqjT3ig+gFfMnhNzlt14HHy8DfZw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3629ba166d05f944110c437414948027_JaffaCakes118
Files
-
3629ba166d05f944110c437414948027_JaffaCakes118.exe windows:5 windows x86 arch:x86
b1b1f2d047d5385ab63bd6d03efa0c18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
DialogBoxParamW
CalcMenuBar
DrawTextW
BeginPaint
AppendMenuA
GetDC
GetWindowTextA
AppendMenuW
IsWindow
BlockInput
CopyImage
InsertMenuA
GetDlgItem
DrawIcon
LoadMenuA
AppendMenuW
CopyRect
CalcMenuBar
CloseWindow
GetWindowTextA
DrawIconEx
IsWindow
CopyImage
DialogBoxParamW
BlockInput
DrawIcon
InsertMenuA
CopyImage
DialogBoxParamA
CopyIcon
CreateIcon
AppendMenuA
CalcMenuBar
GetCursor
IsWindow
CopyRect
BlockInput
DrawTextW
BeginPaint
DrawTextA
LoadCursorA
DrawTextA
DrawTextW
CloseWindow
CopyIcon
GetDlgItem
AppendMenuW
DrawIconEx
BlockInput
LoadCursorA
AlignRects
GetMenu
GetDC
kernel32
OpenFileMappingA
CopyFileExA
FlushFileBuffers
ExitProcess
AddAtomW
DeleteFileA
GetStdHandle
CopyFileExW
FreeResource
GetCPInfo
AddAtomA
GlobalFree
ReadFile
FindClose
GetCommandLineA
FindAtomW
DeleteAtom
DeleteFileW
GetLocalTime
GetPriorityClass
GetFileTime
CreateDirectoryA
WriteFile
CreateDirectoryA
ReadFile
CopyFileExA
GlobalFree
FindAtomW
DeleteFileW
FreeResource
FindClose
GetLocalTime
CopyFileExW
DeleteAtom
AddAtomA
ExitThread
FindAtomA
CopyFileA
AddAtomW
GetCommandLineA
FatalExit
ExitThread
GetFileTime
DeleteFileW
ReadFile
CreateDirectoryA
GetPriorityClass
GetCPInfo
DeleteAtom
WriteFile
OpenFileMappingA
GetFileType
CopyFileA
FlushFileBuffers
FindAtomW
GlobalFree
CopyFileExA
FindClose
GetLocalTime
FatalExit
DeleteAtom
GetStdHandle
GetCommandLineA
GetCPInfo
CopyFileExW
CreateDirectoryA
FreeResource
GetPriorityClass
ExitThread
DeleteFileA
FlushFileBuffers
GetFileTime
GlobalFree
DeleteFileW
ExitProcess
GetCommandLineA
FlushFileBuffers
DeleteAtom
DeleteFileA
OpenFileMappingA
CopyFileExA
CopyFileExW
FatalExit
GetLocalTime
GetStdHandle
GetCPInfo
OpenFile
DeleteAtom
GetLocalTime
OpenFile
GlobalFree
FindClose
OpenFileMappingA
FreeResource
CreateDirectoryA
CopyFileExW
GetFileType
AddAtomA
AddAtomW
GetFileTime
DeleteFileA
CopyFileExA
FindClose
GetStdHandle
DeleteFileA
AddAtomA
CopyFileA
FindAtomA
GetCPInfo
FlushFileBuffers
AddAtomW
FatalExit
GetLastError
ReadFile
ExitThread
WriteFile
GetFileType
WriteFile
DeleteAtom
CopyFileExA
GetCPInfo
GetCommandLineA
GlobalFree
FatalExit
GetPriorityClass
DeleteFileW
AddAtomW
GetLastError
ExitThread
OpenFile
FindAtomA
GetStdHandle
GetFileTime
FreeResource
CopyFileExW
CopyFileExA
GetFileTime
CreateDirectoryA
ReadFile
GetCPInfo
GetStdHandle
GetFileType
FreeResource
FatalExit
FindAtomW
DeleteFileA
OpenFile
AddAtomW
GlobalFree
ExitProcess
DeleteFileA
GetFileType
AddAtomA
FreeResource
GetStdHandle
ReadFile
GlobalFree
CopyFileExW
OpenFileMappingA
OpenFile
DeleteAtom
GetLastError
AddAtomW
WriteFile
FindAtomW
advapi32
RegDeleteValueA
RegOpenKeyExA
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyExW
RegCreateKeyW
RegReplaceKeyW
RegReplaceKeyA
RegFlushKey
RegDeleteKeyA
RegLoadKeyW
RegOpenKeyA
RegQueryInfoKeyA
RegQueryValueA
RegEnumValueA
RegDeleteKeyW
RegCreateKeyExA
RegOpenKeyA
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyW
RegEnumValueA
RegDeleteValueW
RegGetKeySecurity
RegEnumValueW
RegCreateKeyA
RegLoadKeyA
RegDeleteKeyA
RegFlushKey
RegQueryValueExW
RegLoadKeyA
RegEnumKeyExA
RegQueryValueExW
RegReplaceKeyW
RegGetKeySecurity
RegEnumKeyW
RegEnumValueA
RegOpenKeyW
RegOpenKeyExA
RegCreateKeyExW
RegDeleteValueW
RegQueryValueW
RegCreateKeyExW
RegReplaceKeyW
RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegLoadKeyA
RegEnumKeyExA
RegCreateKeyW
RegQueryValueExA
RegDeleteValueW
RegFlushKey
RegReplaceKeyA
RegEnumKeyW
RegQueryInfoKeyW
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyW
RegQueryValueW
RegOpenKeyExA
RegEnumValueW
RegQueryValueExW
RegEnumKeyA
RegGetKeySecurity
RegReplaceKeyA
RegCreateKeyExW
RegDeleteValueA
RegEnumKeyExW
RegQueryInfoKeyA
Sections
.b41ec Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.e1ah9 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7630 Size: 45KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.30g84 Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fhhe4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 875B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ