Static task
static1
Behavioral task
behavioral1
Sample
3f7e77b79eb6cb3d02b733de47553fac_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f7e77b79eb6cb3d02b733de47553fac_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f7e77b79eb6cb3d02b733de47553fac_JaffaCakes118
-
Size
93KB
-
MD5
3f7e77b79eb6cb3d02b733de47553fac
-
SHA1
534c2e0821ef855248052e88f7d460d8dc0456e7
-
SHA256
e35ec03198341182db5e8cde2c289afca1dc094533dce8edcbe976a5f58ac644
-
SHA512
aa162b070ee5558464128251dcd805e6f498b1a665fc0cd9b88a60b95497916f6877eb9920811a30f20924e201c1c16965b5745a807e9a00659ecab77c79f036
-
SSDEEP
1536:za1aqWd6P6EGWvzsxZBkNeE1vjviB+qjtNFe:za1aqWd6P1nzAZusE1WHjZe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f7e77b79eb6cb3d02b733de47553fac_JaffaCakes118
Files
-
3f7e77b79eb6cb3d02b733de47553fac_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f8bc4e3f575c1113b6746acfbb79a55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_LoadImageA
ImageList_Create
ImageList_Remove
ImageList_DrawIndirect
ImageList_Copy
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_DragMove
ImageList_LoadImage
ImageList_Destroy
ImageList_LoadImageW
ImageList_Read
ImageList_Merge
ImageList_BeginDrag
ImageList_GetImageRect
ImageList_GetImageInfo
ImageList_DrawEx
kernel32
lstrcpyA
GetCPInfo
lstrlenA
HeapFree
Sleep
GetFileSize
GetLocalTime
GetFileAttributesA
GetStringTypeA
CloseHandle
GetLastError
GetModuleHandleA
DeleteFileA
GetDateFormatA
lstrcpynA
GetStdHandle
user32
CloseWindow
CreateIcon
AppendMenuA
IsMenu
DrawIconEx
DrawTextA
GetWindowTextA
AppendMenuW
EndDialog
CopyImage
IsWindow
GetDC
LoadCursorA
DrawTextW
DialogBoxParamA
GetMenu
InsertMenuA
DrawIcon
advapi32
RegCreateKeyExW
RegEnumKeyW
RegReplaceKeyA
RegLoadKeyA
RegOpenKeyExA
RegLoadKeyW
RegEnumValueW
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegQueryValueA
RegFlushKey
RegOpenKeyExW
RegCreateKeyW
RegEnumValueA
RegOpenKeyW
Sections
.CsMi Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gIltr Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kMcZR Size: 7KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XbqHD Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ