Static task
static1
Behavioral task
behavioral1
Sample
4a88ef8efbe0aba07ed4f7ebba8212eb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a88ef8efbe0aba07ed4f7ebba8212eb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
4a88ef8efbe0aba07ed4f7ebba8212eb_JaffaCakes118
-
Size
84KB
-
MD5
4a88ef8efbe0aba07ed4f7ebba8212eb
-
SHA1
6dcb093d1f317371c27aa08249b9b2ffa20b34de
-
SHA256
0dc39dcc38e96df9f43b7e087b992accd45d25aa456c292a1217afa29fdf0587
-
SHA512
beb1833d2bb32c4e9bae7c60182ef6044f485d03d072e096934606d57f2124d9b4658646912207b8beaf30165f062be6d074b2d1255cf3fc9443a01117904e05
-
SSDEEP
768:frw96jdxG5Et/t0DkU+gSoqXZ1EWABU4txM55n6NZ/iqYmy45gv2ifRgFxT/Po:frhCWtcD+gda1jQUdgPiNmy45guOgrTY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a88ef8efbe0aba07ed4f7ebba8212eb_JaffaCakes118
Files
-
4a88ef8efbe0aba07ed4f7ebba8212eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
8f116ccd3ebb085bde7eda8c662ce890
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InsertMenuA
CopyIcon
DialogBoxParamA
GetDlgItem
GetFocus
IsWindow
AppendMenuW
IsMenu
GetCursor
CloseWindow
LoadMenuA
EndDialog
AlignRects
GetDC
CopyRect
CopyImage
AlignRects
GetMenu
CloseWindow
CopyImage
DrawTextW
DialogBoxParamW
AppendMenuW
DrawIcon
InsertMenuA
CopyIcon
DialogBoxParamA
GetWindowTextLengthA
BlockInput
CopyRect
GetFocus
LoadMenuA
GetDC
EndDialog
IsMenu
DrawIconEx
advapi32
RegEnumValueA
RegQueryValueExW
RegGetKeySecurity
RegOpenKeyW
RegEnumKeyW
RegLoadKeyW
RegCreateKeyExW
RegDeleteKeyA
RegEnumKeyExW
RegCreateKeyExA
RegReplaceKeyA
RegLoadKeyA
RegEnumKeyA
RegQueryValueW
RegDeleteValueW
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExA
RegEnumValueW
kernel32
lstrcatA
DeleteFileA
GetFileType
GetDateFormatA
GetModuleHandleA
SetLastError
lstrcpyA
HeapFree
lstrcmpiA
HeapAlloc
GetModuleFileNameA
WideCharToMultiByte
GetLastError
GlobalAlloc
GetStdHandle
FreeLibrary
GetStringTypeA
comctl32
ImageList_LoadImageA
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_Merge
ImageList_GetIconSize
ImageList_DrawIndirect
ImageList_Remove
ImageList_GetImageCount
ImageList_GetDragImage
ImageList_Copy
ImageList_LoadImage
ImageList_LoadImageW
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_Replace
ImageList_GetIcon
ImageList_DrawEx
ImageList_GetImageInfo
ImageList_AddMasked
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: 8KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.resr Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ