Static task
static1
Behavioral task
behavioral1
Sample
46d52b9fb969158fd3688d1cc53d4eee_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
46d52b9fb969158fd3688d1cc53d4eee_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46d52b9fb969158fd3688d1cc53d4eee_JaffaCakes118
-
Size
141KB
-
MD5
46d52b9fb969158fd3688d1cc53d4eee
-
SHA1
834d69e3fe43de69464e04be34e21ba1e346bc97
-
SHA256
954eded442c6c0d5bbb290a9a76f33de5a31e62f826c978d6c7d715fc4b3bd78
-
SHA512
9bf282d7c655aeabf2fcdc514b95945002d4990777e9f6cdaf41109eaa73d65b0b369af822870754cb3f12e0fd8c12fd5de09eb053da16c7b0deaaf724de2523
-
SSDEEP
1536:8jz5/k2w56tON/9Nbx2/ipjwoQ6wHeeRUhgsgyN5jdbGP3q7VoagHV:Wk9VNbx2/sHQy5gyN8a7Voa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46d52b9fb969158fd3688d1cc53d4eee_JaffaCakes118
Files
-
46d52b9fb969158fd3688d1cc53d4eee_JaffaCakes118.exe windows:4 windows x86 arch:x86
21e5bed1a5c10f7ab28ef65b9ec8a00d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
GetLastError
CopyFileExW
DeleteAtom
GetComputerNameA
GetFileTime
OpenFile
CopyFileW
DeleteFileW
GlobalFree
CreateDirectoryA
GetCommandLineA
WriteFile
CreateThread
OpenFileMappingA
DeleteFileA
FindAtomA
WriteFile
GetStdHandle
ExitThread
GetComputerNameA
ReadConsoleA
OpenFile
FindAtomA
CopyFileExW
SetLastError
OpenFileMappingA
CreateThread
CopyFileW
CreateProcessA
GetFileTime
DeleteFileW
OpenFile
ExitThread
GlobalFree
OpenFileMappingA
GetFileTime
CreateProcessA
SetLastError
CopyFileA
DeleteAtom
CopyFileW
GetStdHandle
CreateThread
DeleteFileA
CopyFileExA
DeleteAtom
OpenFile
GetCommandLineA
FindFirstFileA
DeleteFileW
GetCPInfo
CopyFileExW
GetComputerNameA
WriteFile
GetConsoleMode
ExitThread
OpenFileMappingA
Sleep
CopyFileA
user32
CopyRect
DialogBoxParamW
DrawTextA
LoadCursorA
AlignRects
CloseWindow
IsWindow
GetDlgItem
DialogBoxParamA
DrawIconEx
CopyImage
GetDC
GetWindowTextA
BlockInput
InsertMenuA
EndDialog
DialogBoxParamW
DrawTextA
CopyRect
LoadMenuA
IsWindow
BlockInput
CloseWindow
CopyIcon
IsMenu
DialogBoxParamA
CalcMenuBar
GetFocus
AlignRects
IsWindow
DrawTextA
DrawIconEx
IsMenu
EndDialog
CopyIcon
GetWindowTextLengthA
GetDlgItem
AppendMenuW
DrawTextW
DialogBoxParamA
BlockInput
AlignRects
GetFocus
gdi32
GetPixel
BeginPath
CloseMetaFile
DeleteDC
GetBitmapBits
AbortPath
GetBrushOrgEx
AddFontResourceA
AddFontMemResourceEx
CreateSolidBrush
GetPixel
CloseFigure
ExtTextOutA
AddFontResourceExW
CancelDC
BitBlt
AddFontResourceW
GetCurrentPositionEx
AddFontMemResourceEx
SetTextColor
ClearBrushAttributes
AddFontResourceExA
CreateSolidBrush
CloseFigure
CancelDC
GetPixel
GetCurrentPositionEx
ExtTextOutA
ExcludeClipRect
AddFontResourceW
GetPixel
GetBitmapBits
AbortPath
RestoreDC
CloseMetaFile
comctl32
ImageList_GetImageRect
ImageList_BeginDrag
InitCommonControls
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_LoadImageA
ImageList_GetDragImage
ImageList_DragMove
ImageList_GetImageRect
ImageList_DrawIndirect
ImageList_Create
ImageList_DragLeave
ImageList_DrawEx
ImageList_Merge
ImageList_LoadImageW
ImageList_GetDragImage
ImageList_GetImageCount
ImageList_GetImageInfo
InitCommonControls
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_AddIcon
ImageList_Read
ImageList_DragMove
ImageList_Read
ImageList_DragLeave
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_DrawIndirect
ImageList_GetIcon
ImageList_Draw
ImageList_LoadImage
ImageList_Destroy
InitCommonControls
ImageList_BeginDrag
ImageList_Merge
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 518B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 185B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ