Static task
static1
Behavioral task
behavioral1
Sample
3e09f328c6e5e23774510ed6c748c27f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e09f328c6e5e23774510ed6c748c27f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e09f328c6e5e23774510ed6c748c27f_JaffaCakes118
-
Size
65KB
-
MD5
3e09f328c6e5e23774510ed6c748c27f
-
SHA1
83455ba4973a2d54d05dcb6b4f6692a06d0293fd
-
SHA256
e3db718f3eb47e1c797b9386d7fb77d131b0511b46efea0f5d463f6372df14c4
-
SHA512
c2411b4aba24a99f1d3edf272f3d6753f77fc2441f86e2f6b54a6db8784c0626788d02baac7d88aa22adf05a66584ebaa0e1dc129e41f376510f83af409f55c6
-
SSDEEP
1536:Pj76Yv6Gbwn0VIlG2M5R02NDj+UgwbU1vD38XSvw2wuPUK:PLbBI0z5R5NDqUgwbwo2noK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e09f328c6e5e23774510ed6c748c27f_JaffaCakes118
Files
-
3e09f328c6e5e23774510ed6c748c27f_JaffaCakes118.exe windows:4 windows x86 arch:x86
e70bb9293b1b3f81c96f0f8ccb6131e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
BitBlt
AddFontResourceA
ClearBrushAttributes
DeleteObject
AddFontResourceExA
SetTextColor
GetPixel
GetDCOrgEx
AddFontMemResourceEx
GetCurrentPositionEx
GetBrushOrgEx
AbortPath
GetPixel
ClearBitmapAttributes
ExcludeClipRect
CreateSolidBrush
GetPixel
ClearBitmapAttributes
AddFontResourceTracking
CopyMetaFileA
DeleteObject
AddFontResourceExA
ClearBrushAttributes
CloseFigure
DeleteDC
CloseMetaFile
BitBlt
ExtTextOutA
RestoreDC
GetBitmapBits
GetPixel
ExcludeClipRect
SetTextColor
AddFontMemResourceEx
GetBitmapBits
GetClipBox
GetCurrentPositionEx
ClearBitmapAttributes
ExtTextOutA
CloseMetaFile
AddFontResourceExA
AddFontResourceTracking
CreateSolidBrush
DeleteObject
CopyMetaFileA
GetBrushOrgEx
RestoreDC
GetPixel
CloseFigure
BitBlt
AddFontMemResourceEx
ClearBrushAttributes
AddFontResourceA
CancelDC
user32
DrawIcon
DialogBoxParamA
BlockInput
CopyImage
AlignRects
DialogBoxParamW
IsWindow
InsertMenuA
GetCursor
AppendMenuW
GetWindowTextLengthA
DrawTextA
GetDC
AppendMenuA
CloseWindow
DrawTextW
advapi32
RegEnumValueW
RegDeleteKeyW
RegQueryValueA
RegEnumKeyW
RegEnumKeyA
RegOpenKeyW
RegLoadKeyA
RegReplaceKeyW
RegOpenKeyA
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueA
RegReplaceKeyA
RegCreateKeyExW
RegOpenKeyExA
RegQueryValueW
RegQueryValueExW
RegCreateKeyW
RegCreateKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegEnumKeyA
RegLoadKeyW
RegEnumValueW
RegDeleteKeyA
RegOpenKeyExW
RegEnumKeyExA
RegQueryValueExW
RegOpenKeyW
RegEnumKeyExW
RegCreateKeyW
RegQueryValueW
RegEnumKeyW
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueA
RegFlushKey
RegReplaceKeyW
RegReplaceKeyA
RegDeleteValueA
RegEnumValueA
RegDeleteValueW
RegOpenKeyA
RegGetKeySecurity
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueA
RegEnumKeyA
RegLoadKeyW
RegQueryValueExA
RegEnumKeyW
RegEnumKeyExW
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyW
RegEnumValueA
RegGetKeySecurity
RegDeleteValueW
RegFlushKey
RegLoadKeyA
RegQueryInfoKeyW
RegReplaceKeyW
kernel32
WriteFile
GetFileSize
Sleep
CreateProcessA
ExitThread
DeleteFileA
GetCommandLineA
CreateThread
DeleteAtom
ReadConsoleA
CopyFileA
GetStdHandle
OpenFileMappingA
FindFirstFileA
GetLastError
GetComputerNameA
GlobalFree
GetFileTime
GetCommandLineA
DeleteFileW
GetComputerNameA
CopyFileExA
GetConsoleMode
CreateProcessA
DeleteFileA
CopyFileExW
ExitThread
GetCPInfo
DeleteAtom
CreateDirectoryA
SetLastError
CopyFileA
CreateThread
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ