Static task
static1
Behavioral task
behavioral1
Sample
3d9651adf7da741d27d93097baa45826_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d9651adf7da741d27d93097baa45826_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d9651adf7da741d27d93097baa45826_JaffaCakes118
-
Size
61KB
-
MD5
3d9651adf7da741d27d93097baa45826
-
SHA1
48135057d9e885f0ede5753533e84355f82b7405
-
SHA256
1fd8006fb1feded6e37c30a40a2a2c3165fe7ac030d07d0165294d9b127a0889
-
SHA512
094d3b4169d87dd5f47d37c74fd498b10467eaa0e4efc37192607bfd28837e5c07c5b3b859f021f2ddad0e1122db0f8d233d45c62f0b0fbe87249c43a2a7a934
-
SSDEEP
1536:6oo7J1dMmpOyImR8Tr7q3QKGh1zxwR2eA3KHj3ARs8RP:6WMOyBN6zYA3KUFJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d9651adf7da741d27d93097baa45826_JaffaCakes118
Files
-
3d9651adf7da741d27d93097baa45826_JaffaCakes118.exe windows:4 windows x86 arch:x86
ff81e05ec2cf76786941e6b4b9032bc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadCursorA
BlockInput
GetDC
CopyRect
DrawTextW
LoadMenuA
GetDlgItem
DrawIconEx
GetCursor
AppendMenuW
GetMenu
DrawIcon
DialogBoxParamA
CopyIcon
EndDialog
CloseWindow
GetWindowTextA
CalcMenuBar
GetWindowTextLengthA
AlignRects
GetMenu
LoadMenuA
DrawIconEx
kernel32
GetCPInfo
ExitThread
GetConsoleMode
DeleteFileA
CopyFileExA
CreateDirectoryA
CreateProcessA
DeleteAtom
GetComputerNameA
CopyFileW
GetStdHandle
DeleteFileW
ReadFile
DeleteAtom
CopyFileExW
GetLastError
Sleep
GetFileTime
CreateThread
WriteFile
GetCPInfo
DeleteFileA
GetFileSize
OpenFileMappingA
DeleteFileW
GetCommandLineA
ReadFile
CopyFileA
ReadConsoleA
SetLastError
OpenFile
CopyFileA
DeleteFileW
SetLastError
GetCPInfo
GetComputerNameA
FindAtomA
GetConsoleMode
CreateProcessA
CreateDirectoryA
GetStdHandle
ReadFile
WriteFile
advapi32
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteKeyA
RegReplaceKeyW
RegReplaceKeyA
RegEnumKeyW
RegEnumValueW
RegLoadKeyA
RegFlushKey
RegQueryValueA
RegCreateKeyW
RegQueryValueExW
RegOpenKeyW
RegOpenKeyA
RegEnumValueA
RegLoadKeyW
RegCreateKeyExA
RegDeleteKeyW
RegOpenKeyA
RegDeleteValueA
RegQueryValueExW
RegEnumValueW
RegDeleteKeyA
RegLoadKeyW
RegQueryValueExA
RegGetKeySecurity
RegEnumKeyExW
RegFlushKey
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegReplaceKeyA
RegQueryInfoKeyA
RegFlushKey
RegCreateKeyExW
RegQueryValueW
RegReplaceKeyW
RegEnumKeyExW
RegReplaceKeyA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteValueW
RegDeleteValueA
RegOpenKeyA
RegEnumKeyW
RegQueryValueExW
RegEnumKeyExA
RegQueryValueW
RegEnumKeyExW
RegOpenKeyW
RegEnumKeyW
RegDeleteValueA
RegEnumValueA
RegCreateKeyExW
RegQueryValueA
RegCreateKeyExA
RegLoadKeyA
RegQueryInfoKeyA
RegQueryValueExW
RegLoadKeyW
RegFlushKey
RegOpenKeyExA
gdi32
AddFontResourceExA
GetBitmapBits
AddFontMemResourceEx
ClearBrushAttributes
AddFontResourceTracking
ClearBitmapAttributes
GetClipBox
BitBlt
DeleteObject
CloseMetaFile
comctl32
ImageList_AddMasked
ImageList_GetImageCount
ImageList_GetIcon
ImageList_AddIcon
ImageList_Draw
ImageList_Replace
InitCommonControls
ImageList_LoadImageA
ImageList_BeginDrag
ImageList_DragMove
ImageList_LoadImageW
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Replace
ImageList_DragLeave
ImageList_AddIcon
ImageList_GetIconSize
ImageList_BeginDrag
ImageList_DragEnter
ImageList_Merge
ImageList_AddMasked
ImageList_GetDragImage
ImageList_Draw
ImageList_Read
ImageList_DragShowNolock
ImageList_Create
ImageList_EndDrag
ImageList_Remove
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ