Static task
static1
Behavioral task
behavioral1
Sample
47f48d75791e9ff4831b0e4a553c5569_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
47f48d75791e9ff4831b0e4a553c5569_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47f48d75791e9ff4831b0e4a553c5569_JaffaCakes118
-
Size
1.5MB
-
MD5
47f48d75791e9ff4831b0e4a553c5569
-
SHA1
3a1f8a2186611e0c3bcf53cc650307dd5a6bbe82
-
SHA256
a7173500bd783ef55d520cb4c9cdd235a250437e639ed589ac99855d65324b5f
-
SHA512
3f7da305e8aa756bdf2fd7cef806a0b249c871e1ddfbd6642aacd24af46d2fec0bc99b74268f8a97067a3eabf5515cf121a2fd7d8aec46a86f689bb60685a6cb
-
SSDEEP
24576:L6x4SD2YP9PeJaSl2eiaQtXOstG0Bu/SCoIxFViKsSKlRZMXK:G4Si2Op2TaQtestpiUSaZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47f48d75791e9ff4831b0e4a553c5569_JaffaCakes118
Files
-
47f48d75791e9ff4831b0e4a553c5569_JaffaCakes118.exe windows:4 windows x86 arch:x86
d0ebfaab3af945a09ae063405c1bf574
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryInfoKeyA
RegOpenKeyW
RegCreateKeyW
RegQueryInfoKeyW
RegOpenKeyA
RegEnumKeyW
RegDeleteKeyA
RegQueryValueExW
RegEnumKeyA
RegCreateKeyExA
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueA
RegQueryValueExA
user32
GetFocus
LoadCursorA
GetMenu
InsertMenuA
IsMenu
IsWindow
AppendMenuW
AlignRects
DrawTextW
CopyRect
CopyIcon
GetDC
CloseWindow
CalcMenuBar
BlockInput
GetWindowTextLengthA
DrawIconEx
GetCursor
CopyImage
BlockInput
DrawTextW
DialogBoxParamW
InsertMenuA
GetFocus
DrawTextA
CreateIcon
CopyRect
CalcMenuBar
GetWindowTextLengthA
CloseWindow
IsWindow
AppendMenuA
AppendMenuW
DrawIconEx
GetDlgItem
LoadCursorA
GetCursor
CopyImage
CopyRect
AppendMenuW
LoadCursorA
LoadMenuA
AlignRects
GetDC
GetWindowTextA
GetDlgItem
DialogBoxParamA
CalcMenuBar
CopyIcon
GetFocus
DialogBoxParamW
IsWindow
GetCursor
GetDC
CopyRect
CreateIcon
GetWindowTextLengthA
BlockInput
GetDlgItem
CopyIcon
CopyImage
GetMenu
GetFocus
LoadMenuA
AlignRects
EndDialog
GetWindowTextA
GetDlgItem
LoadMenuA
CopyImage
DrawIcon
DialogBoxParamA
CopyRect
GetWindowTextLengthA
DrawIconEx
AppendMenuA
AppendMenuW
GetDC
AlignRects
CreateIcon
DrawTextW
EndDialog
GetFocus
BlockInput
GetWindowTextA
DrawTextA
kernel32
ReadConsoleW
CreateDirectoryA
OpenFile
DeleteFileA
FindAtomA
ReadConsoleA
GetConsoleMode
CreateProcessA
DeleteAtom
CopyFileExA
GetFileSize
CopyFileA
GetStdHandle
GetFileTime
ReadFile
ExitThread
DeleteFileW
GetLastError
GlobalFree
CopyFileA
CreateProcessA
CopyFileExA
Sleep
CreateDirectoryA
ReadFile
WriteFile
GetFileSize
ExitThread
GetStdHandle
FindAtomA
OpenFileMappingA
GetConsoleMode
CreateDirectoryA
ReadConsoleW
ReadFile
CreateProcessA
GetConsoleMode
OpenFileMappingA
DeleteAtom
GetLastError
CreateThread
FindAtomA
DeleteFileA
GetStdHandle
GetFileTime
GetCommandLineA
CopyFileA
GlobalFree
DeleteAtom
CopyFileExW
ExitThread
ReadConsoleW
FindFirstFileA
Sleep
OpenFileMappingA
GetConsoleMode
GlobalFree
GetComputerNameA
OpenFile
CopyFileA
GetFileSize
WriteFile
ReadFile
FindAtomA
CreateProcessA
GetCommandLineA
Sections
CODE Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.1MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 512B - Virtual size: 115B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ