Static task
static1
Behavioral task
behavioral1
Sample
40bc82ee81a6b3d7a9eaa3f67552d748_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40bc82ee81a6b3d7a9eaa3f67552d748_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40bc82ee81a6b3d7a9eaa3f67552d748_JaffaCakes118
-
Size
64KB
-
MD5
40bc82ee81a6b3d7a9eaa3f67552d748
-
SHA1
832be0845ac0a07b15c3bc8d9a68e338eda9a0db
-
SHA256
95df06223404108acd2b706de5d942391a981aa610857548307e64f761d1a89d
-
SHA512
1e761dcb2b1bab53111a286b470eb9673410b1e6f23b67dd57d35f8095cb90bcaf4fff225c7be64ab67879477df203945fde71ccd75ef2f7731ea8875ffd25fc
-
SSDEEP
768:Qha2fYxRUZhEr8EjYT4tQkQj+15pjvsDPVyIU17Z9zF9KUXjA:FVUZWrRtQy5pjMUI+77HKd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40bc82ee81a6b3d7a9eaa3f67552d748_JaffaCakes118
Files
-
40bc82ee81a6b3d7a9eaa3f67552d748_JaffaCakes118.exe windows:4 windows x86 arch:x86
64c3169ce926b592d372b622123d3266
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegReplaceKeyA
RegDeleteKeyA
RegDeleteValueW
RegQueryInfoKeyW
RegEnumKeyW
RegGetKeySecurity
RegQueryValueA
RegQueryValueExA
RegReplaceKeyW
RegOpenKeyA
RegFlushKey
RegCreateKeyW
RegEnumKeyA
RegQueryValueW
RegCreateKeyExA
RegGetKeySecurity
RegEnumKeyExA
RegDeleteValueW
RegOpenKeyA
RegLoadKeyW
RegOpenKeyW
RegOpenKeyExW
RegEnumValueW
RegFlushKey
RegQueryValueExW
RegCreateKeyExW
RegReplaceKeyA
RegFlushKey
RegEnumKeyA
RegQueryInfoKeyA
RegQueryValueW
RegQueryInfoKeyW
RegLoadKeyA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueW
RegEnumKeyExW
RegLoadKeyW
RegEnumKeyW
RegQueryValueExA
RegReplaceKeyW
RegOpenKeyExA
RegDeleteKeyW
RegEnumKeyExA
RegOpenKeyExW
RegOpenKeyExA
RegEnumValueA
RegFlushKey
RegQueryValueExA
RegDeleteValueW
RegQueryValueExW
RegQueryValueA
RegEnumKeyExA
RegEnumKeyW
RegCreateKeyW
user32
DrawTextA
AlignRects
CalcMenuBar
GetDC
IsMenu
GetMenu
IsWindow
AppendMenuA
BlockInput
AppendMenuW
DialogBoxParamW
DrawIconEx
DialogBoxParamA
CloseWindow
DrawTextW
GetWindowTextA
CreateIcon
CopyIcon
LoadCursorA
DrawIconEx
EndDialog
CopyImage
AppendMenuA
DrawTextW
CloseWindow
GetDC
CalcMenuBar
GetWindowTextA
AlignRects
LoadCursorA
DialogBoxParamA
BlockInput
DrawIcon
CloseWindow
DrawIcon
GetFocus
LoadCursorA
GetWindowTextLengthA
GetWindowTextA
AppendMenuA
DrawIconEx
BlockInput
DrawTextW
CopyRect
DialogBoxParamW
IsWindow
GetDC
GetFocus
LoadMenuA
AlignRects
CreateIcon
DrawIcon
GetWindowTextA
CopyImage
GetMenu
AppendMenuW
DialogBoxParamA
CalcMenuBar
comctl32
ImageList_GetIconSize
ImageList_LoadImage
ImageList_BeginDrag
ImageList_AddIcon
ImageList_Draw
ImageList_DrawEx
ImageList_AddMasked
ImageList_ReplaceIcon
InitCommonControls
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_Read
ImageList_GetImageRect
ImageList_Replace
ImageList_DragMove
ImageList_EndDrag
ImageList_DrawIndirect
ImageList_LoadImageA
ImageList_GetImageInfo
ImageList_Read
ImageList_GetImageCount
ImageList_Destroy
ImageList_DragMove
ImageList_Create
ImageList_GetIcon
ImageList_BeginDrag
ImageList_AddMasked
InitCommonControls
ImageList_GetIconSize
ImageList_Copy
ImageList_Replace
ImageList_Remove
ImageList_DrawIndirect
ImageList_EndDrag
ImageList_LoadImage
ImageList_GetImageRect
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 394B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ