Static task
static1
Behavioral task
behavioral1
Sample
4b9ea83bff05ac614ab826301b22785e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b9ea83bff05ac614ab826301b22785e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b9ea83bff05ac614ab826301b22785e_JaffaCakes118
-
Size
64KB
-
MD5
4b9ea83bff05ac614ab826301b22785e
-
SHA1
e7cf4b855500bc5ac62a0ad858a4060fef46bb2a
-
SHA256
562d57ffd1141f644181383347f8a6393b393bc73119ac64edc266bbdd6a9a35
-
SHA512
90ee44c0d9da36ca0bd15551287d7a2604a02ef37c48b48b5c9a61dff1593417030bc584cc18f154b4774b660bb0fe42cc9040f8d30b81ffe3331e2058284fd4
-
SSDEEP
1536:znh/th6J/q7WU+kTts/5vveV9VS5PZTYhxlwnXIB:/h0y7WU+k5s/0SVZT0+4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b9ea83bff05ac614ab826301b22785e_JaffaCakes118
Files
-
4b9ea83bff05ac614ab826301b22785e_JaffaCakes118.exe windows:4 windows x86 arch:x86
3f037e77e6a6bd143a7a690d6471eb2d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCursor
GetWindowTextLengthA
GetFocus
AlignRects
GetDlgItem
IsMenu
BlockInput
CopyRect
CopyIcon
CloseWindow
DialogBoxParamW
DrawIconEx
EndDialog
GetFocus
CreateIcon
GetMenu
AppendMenuA
DrawIcon
InsertMenuA
GetCursor
IsMenu
DrawIconEx
CalcMenuBar
GetWindowTextLengthA
CreateIcon
CopyIcon
DrawTextA
DialogBoxParamW
AppendMenuW
CalcMenuBar
IsWindow
InsertMenuA
CopyRect
GetDC
GetMenu
DrawIconEx
LoadMenuA
CopyImage
GetDlgItem
advapi32
RegFlushKey
RegCreateKeyExA
RegCreateKeyExW
RegGetKeySecurity
RegEnumKeyExA
RegCreateKeyW
RegOpenKeyExA
RegOpenKeyA
RegReplaceKeyA
RegEnumKeyW
RegLoadKeyA
RegOpenKeyExW
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegEnumValueW
RegQueryValueA
RegOpenKeyExW
RegQueryInfoKeyA
RegCreateKeyW
RegEnumKeyA
RegDeleteKeyW
RegQueryInfoKeyW
RegReplaceKeyA
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyA
RegEnumKeyW
RegQueryValueW
RegQueryInfoKeyW
RegDeleteKeyW
RegOpenKeyW
RegCreateKeyW
RegEnumKeyW
RegReplaceKeyW
RegEnumKeyExA
RegEnumKeyA
RegQueryInfoKeyA
RegEnumKeyExW
RegFlushKey
RegDeleteValueW
RegLoadKeyA
RegOpenKeyExW
RegQueryValueA
RegCreateKeyExW
RegEnumValueW
RegDeleteKeyA
RegQueryValueW
RegOpenKeyW
RegLoadKeyW
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegFlushKey
RegCreateKeyExA
RegReplaceKeyA
RegEnumValueW
kernel32
CopyFileA
GetStdHandle
OpenFileMappingA
DeleteAtom
CopyFileExW
ReadFile
CreateProcessA
GetLastError
FindFirstFileA
GlobalFree
GetFileTime
CopyFileExA
GetCommandLineA
GetFileSize
ExitThread
ReadConsoleA
CreateDirectoryA
SetLastError
GetCommandLineA
GlobalFree
CopyFileExA
GetConsoleMode
ReadFile
ExitThread
GetComputerNameA
GetFileTime
CopyFileA
CopyFileExW
GetFileSize
CopyFileW
OpenFileMappingA
WriteFile
CreateThread
CreateDirectoryA
GetStdHandle
GetLastError
gdi32
GetPixel
CloseFigure
AddFontResourceExW
GetCurrentPositionEx
ExtTextOutA
ExcludeClipRect
BeginPath
DeleteObject
CopyMetaFileA
GetBitmapBits
SetTextColor
AddFontResourceA
CloseMetaFile
GetClipBox
BeginPath
BitBlt
AddFontResourceW
ClearBitmapAttributes
CloseFigure
ClearBrushAttributes
AddFontResourceTracking
DeleteDC
AddFontResourceExW
GetBrushOrgEx
GetPixel
ExcludeClipRect
AbortPath
AddFontResourceExA
DeleteObject
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ