Static task
static1
Behavioral task
behavioral1
Sample
48906cb231771c0fccac7fb081db3625_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48906cb231771c0fccac7fb081db3625_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48906cb231771c0fccac7fb081db3625_JaffaCakes118
-
Size
505KB
-
MD5
48906cb231771c0fccac7fb081db3625
-
SHA1
9bf4df938b0c269f9f9bf6154ceaa3fd2bced1dc
-
SHA256
99ba0f39e84960da530b28b430fa7ddbef260a7d4d029b616630b77be7e716a0
-
SHA512
31ab13f986404429cae49fa2e2b4122f9812867d80174c2f9cf2b1da7ff7a5984d63af4360a5e7ae23c478610915a2a0bd697ddc359f18b03db44b79313fc985
-
SSDEEP
12288:GzggR75h9w3PJHJLRQGdmypAqatu5FBaDv5SDO1NJr:u175HwxHhRQGIlqUu5jamQx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48906cb231771c0fccac7fb081db3625_JaffaCakes118
Files
-
48906cb231771c0fccac7fb081db3625_JaffaCakes118.exe windows:4 windows x86 arch:x86
18e71ed3fc993d9dcd6cece35a5917a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegOpenKeyExA
ReportEventA
RegisterEventSourceA
RegCreateKeyExW
DeregisterEventSource
RegQueryInfoKeyW
RegQueryValueExA
gdi32
SetTextColor
ExtTextOutW
DeleteObject
GetDeviceCaps
CreateFontIndirectW
AddFontResourceW
SelectObject
RemoveFontResourceW
SetBkColor
GetTextExtentPointW
GetTextExtentPoint32W
GetStockObject
GetFontResourceInfoW
user32
GetDlgItemTextW
InvalidateRect
CreateMenu
LoadStringA
GetSystemMetrics
ReleaseDC
SetWindowLongW
DefDlgProcW
SetWindowPos
IsDialogMessageW
GetWindowLongW
CloseClipboard
DlgDirListComboBoxW
RegisterClassW
SetFocus
ScreenToClient
OpenClipboard
MessageBoxA
RegisterWindowMessageW
GetFocus
IsClipboardFormatAvailable
CreateDialogParamW
DestroyWindow
EndDialog
ShowWindow
PeekMessageW
TranslateAcceleratorW
GetDC
IsWindowEnabled
SetMenuItemInfoW
TrackPopupMenu
GetAsyncKeyState
PostMessageW
CreateWindowExW
DestroyMenu
UnregisterClassW
ClientToScreen
MessageBoxW
CheckDlgButton
GetDesktopWindow
LoadMenuW
SendDlgItemMessageW
DefWindowProcW
BeginPaint
DrawTextExW
LoadAcceleratorsW
GetKeyState
DestroyIcon
SetDlgItemTextW
SetForegroundWindow
GetDialogBaseUnits
EndPaint
CharUpperW
CharNextW
CheckMenuItem
RegisterClipboardFormatW
DeleteMenu
GetParent
CharPrevW
InflateRect
TranslateMessage
LoadStringW
LoadImageW
WinHelpW
DialogBoxParamW
InsertMenuW
FrameRect
TrackPopupMenuEx
EnableWindow
ChangeClipboardChain
PtInRect
GetClassInfoW
SendMessageW
MapWindowPoints
EmptyClipboard
UpdateWindow
SetClipboardData
LoadCursorW
MoveWindow
GetForegroundWindow
IsDlgButtonChecked
GetDlgCtrlID
GetClientRect
MsgWaitForMultipleObjects
CopyIcon
SetWindowTextW
SetCursor
DispatchMessageW
GetMenuState
EnableMenuItem
EnumPropsA
CheckMenuRadioItem
GetMenuItemInfoW
GetSubMenu
GetWindowRect
GetClipboardData
GetSysColor
ole32
ReleaseStgMedium
wmi
QueryAllTracesW
shlwapi
wnsprintfW
SHRegGetUSValueW
PathAddBackslashW
StrRChrW
PathCombineW
StrDupW
PathRemoveFileSpecW
StrCmpNIW
PathAppendW
PathFindExtensionW
PathFindFileNameW
StrChrW
lz32
LZRead
LZCopy
LZSeek
LZClose
LZOpenFileW
GetExpandedNameW
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 483KB - Virtual size: 482KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE