Static task
static1
Behavioral task
behavioral1
Sample
47fb8833615cc68b7cde88e64c490b39_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47fb8833615cc68b7cde88e64c490b39_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47fb8833615cc68b7cde88e64c490b39_JaffaCakes118
-
Size
136KB
-
MD5
47fb8833615cc68b7cde88e64c490b39
-
SHA1
7f4b39f0471a02bce1bb911fb3f3acbc1be953f4
-
SHA256
4fc3877bbb72753805c4ca67812863debf4495cd36f4d5034855b250863d14cd
-
SHA512
fb846d0812882302f1d764d142f2f0c9bf2b3a69f253c04f30b2a7ed4c7de9a2f9ae60a4428b4bcac5197fda39323d293cfde12027e48cd952cfc5910e985e5d
-
SSDEEP
1536:k+pOClov7L3oJ5SJT0sg6PiEzla1jNdtKN8YfpLC5O0EPNci:5pOClMzxJ4R641xK6YhKO0ER
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47fb8833615cc68b7cde88e64c490b39_JaffaCakes118
Files
-
47fb8833615cc68b7cde88e64c490b39_JaffaCakes118.exe windows:4 windows x86 arch:x86
dcd95aa16464bda70b49e27022cb3a13
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegFlushKey
RegEnumValueA
RegReplaceKeyA
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueA
RegQueryValueExA
RegQueryInfoKeyW
RegDeleteValueW
RegEnumValueW
RegQueryInfoKeyA
RegReplaceKeyW
RegCreateKeyW
RegOpenKeyA
RegDeleteValueA
RegLoadKeyA
RegDeleteKeyW
RegGetKeySecurity
RegCreateKeyExA
RegEnumKeyW
RegEnumKeyA
RegOpenKeyW
user32
IsMenu
LoadMenuA
CalcMenuBar
CloseWindow
GetDlgItem
BlockInput
InsertMenuA
DrawIcon
CopyIcon
GetFocus
CopyRect
EndDialog
DrawIconEx
IsWindow
GetDC
DialogBoxParamW
DrawTextW
GetWindowTextA
GetWindowTextLengthA
CopyImage
DrawTextA
AppendMenuW
LoadCursorA
DrawTextA
DrawIconEx
CopyIcon
GetDC
IsMenu
CreateIcon
GetMenu
LoadCursorA
AlignRects
BlockInput
InsertMenuA
AppendMenuA
EndDialog
DialogBoxParamA
GetFocus
CopyImage
GetDlgItem
LoadMenuA
CloseWindow
AppendMenuW
gdi32
CreateSolidBrush
GetBrushOrgEx
ExcludeClipRect
GetDCOrgEx
AddFontResourceExA
GetPixel
CloseFigure
AddFontResourceTracking
ClearBitmapAttributes
ExtTextOutA
CopyMetaFileA
GetCurrentPositionEx
CancelDC
AddFontResourceA
SetTextColor
ClearBrushAttributes
DeleteDC
kernel32
ExitThread
ReadFile
CopyFileW
WriteFile
GetComputerNameA
GetStdHandle
CopyFileA
CreateThread
GetCommandLineA
GetFileSize
GetFileTime
OpenFileMappingA
GetLastError
FindAtomA
DeleteFileW
GetCommandLineA
GlobalFree
DeleteFileA
OpenFileMappingA
ExitThread
CopyFileExA
CopyFileA
FindFirstFileA
SetLastError
GetStdHandle
ReadConsoleA
GetComputerNameA
GetConsoleMode
WriteFile
DeleteFileW
Sleep
GetCPInfo
CreateThread
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 117B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ