Static task
static1
Behavioral task
behavioral1
Sample
3f6d3272d87368531346b8fbc623c6cb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f6d3272d87368531346b8fbc623c6cb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f6d3272d87368531346b8fbc623c6cb_JaffaCakes118
-
Size
33KB
-
MD5
3f6d3272d87368531346b8fbc623c6cb
-
SHA1
eb47fbd6505a0c4316b891b0118ae0e75623d85e
-
SHA256
1a777f56e574a42136158865f55efe2533aefb33f1c7890d5148ad8f246636a7
-
SHA512
49d39ddcb8f598647ada38066cdccf07cba6482f9d6862c7619c6f81dc08f821070d64bdfd46267bccfeaa652e4e749deac94fa7b59e13cf56c7d0b369628b60
-
SSDEEP
384:akgtML9svX3DF5tf7cAdFjf5DBEERd7IgrRJ0BU16H85fV/MTxgLh4hj:Bg9nDFff7cgFjvEG7Io8BI6c1ygL6hj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f6d3272d87368531346b8fbc623c6cb_JaffaCakes118
Files
-
3f6d3272d87368531346b8fbc623c6cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
e8f5a3c8bdfc68754b9fc5d2bec90a65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegDeleteValueW
RegLoadKeyW
RegDeleteValueA
RegEnumKeyW
RegCreateKeyW
RegOpenKeyA
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyExA
RegReplaceKeyA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegReplaceKeyW
RegDeleteKeyW
RegOpenKeyW
RegLoadKeyA
RegQueryValueW
RegEnumValueA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueW
RegLoadKeyW
RegQueryInfoKeyW
RegQueryValueW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExW
RegCreateKeyExA
RegEnumValueA
RegFlushKey
RegQueryValueExW
RegEnumKeyW
RegOpenKeyW
RegGetKeySecurity
RegReplaceKeyA
RegOpenKeyExA
RegLoadKeyA
RegCreateKeyW
RegEnumValueW
RegQueryValueExA
RegEnumKeyA
RegQueryValueExA
RegLoadKeyW
RegEnumValueW
RegOpenKeyExA
RegQueryInfoKeyW
RegQueryValueA
RegOpenKeyA
RegQueryInfoKeyA
RegGetKeySecurity
RegDeleteKeyA
RegEnumValueA
RegCreateKeyExA
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
kernel32
FindFirstFileA
GetCPInfo
CopyFileExW
CreateProcessA
GlobalFree
CopyFileExA
FindAtomA
CopyFileA
GetConsoleMode
ExitThread
CopyFileW
Sleep
GetCommandLineA
CreateDirectoryA
ReadConsoleA
GetComputerNameA
DeleteFileW
GetFileSize
SetLastError
GetStdHandle
WriteFile
OpenFile
OpenFile
GetLastError
CreateDirectoryA
DeleteFileW
CreateProcessA
GetComputerNameA
GetStdHandle
DeleteFileA
GlobalFree
GetCommandLineA
GetFileSize
GetCPInfo
CopyFileExW
CopyFileW
CreateThread
comctl32
ImageList_Create
ImageList_DrawIndirect
ImageList_DragMove
ImageList_Draw
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_GetIcon
ImageList_AddIcon
ImageList_GetImageCount
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_Merge
ImageList_DragShowNolock
ImageList_GetImageInfo
ImageList_DragLeave
ImageList_AddMasked
ImageList_DrawEx
ImageList_Remove
ImageList_EndDrag
ImageList_Read
ImageList_GetDragImage
ImageList_GetImageRect
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_Copy
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_DragMove
ImageList_DragLeave
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Replace
InitCommonControls
ImageList_Draw
ImageList_GetImageCount
gdi32
AddFontMemResourceEx
DeleteObject
AddFontResourceTracking
ClearBrushAttributes
ClearBitmapAttributes
AddFontResourceA
RestoreDC
BeginPath
SetTextColor
ExtTextOutA
GetClipBox
AddFontResourceExW
CloseFigure
GetDCOrgEx
GetCurrentPositionEx
AddFontResourceExA
GetPixel
CopyMetaFileA
AbortPath
GetBitmapBits
CloseMetaFile
CloseFigure
SetTextColor
CreateSolidBrush
GetBrushOrgEx
GetCurrentPositionEx
ExcludeClipRect
BitBlt
CopyMetaFileA
ClearBitmapAttributes
CancelDC
BeginPath
AddFontMemResourceEx
RestoreDC
AddFontResourceTracking
ClearBrushAttributes
AddFontResourceW
GetPixel
AddFontResourceExA
GetBitmapBits
GetPixel
AddFontResourceA
DeleteDC
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 954B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ