Static task
static1
Behavioral task
behavioral1
Sample
4d7b9ffe40ae4b1687fa3a152a6f78ea_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4d7b9ffe40ae4b1687fa3a152a6f78ea_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d7b9ffe40ae4b1687fa3a152a6f78ea_JaffaCakes118
-
Size
985KB
-
MD5
4d7b9ffe40ae4b1687fa3a152a6f78ea
-
SHA1
f168fa2e23327a027a9ba09d91e65e64995b9eba
-
SHA256
8c0fb1879fa9913b05a574d749a9a5b2921bd3b576ff94c3843f1cd03fc0574e
-
SHA512
a85ccdd1f14f6a8793ca6f8988d51a9e148afe13399ef978721e7c6f1bee002a2ff58c0445b70a612a710754de9859c75cfcaef40d0b7e48b0302fb650d97d94
-
SSDEEP
12288:9wJIgKKM4YzX1w3fQz78b9n34h6m+v7wp/whLLdnJPyTeEFHOyAGCzTJLE:WgR1ZwPQzgbw+v72IlVJPyq1yAFzTFE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d7b9ffe40ae4b1687fa3a152a6f78ea_JaffaCakes118
Files
-
4d7b9ffe40ae4b1687fa3a152a6f78ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
55e8c4e7bea3b4368344cd6fc9f0b4d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyA
RegCreateKeyExW
RegDeleteKeyW
RegEnumValueW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExA
RegQueryValueExW
RegQueryValueW
RegSetValueExW
kernel32
CloseHandle
CreateFileA
CreateFileMappingW
CreateFileW
ExitProcess
InitializeCriticalSection
MapViewOfFile
ReadFile
SetFilePointer
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
signal
sprintf
sscanf
strcpy
wcscpy
user32
AdjustWindowRectEx
AppendMenuW
BeginDeferWindowPos
BeginPaint
CallWindowProcW
CheckMenuRadioItem
ClientToScreen
CloseClipboard
CreateDialogIndirectParamW
CreateDialogParamW
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DeferWindowPos
DestroyCursor
DestroyMenu
DestroyWindow
DispatchMessageW
DrawEdge
DrawStateW
EmptyClipboard
EnableWindow
EndDeferWindowPos
EndPaint
EnumClipboardFormats
EnumWindows
FillRect
GetActiveWindow
GetAsyncKeyState
GetCapture
GetClassInfoW
GetClassNameW
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetFocus
GetKeyState
GetMenuItemCount
GetMenuItemInfoW
GetMenuState
GetMessagePos
GetMessageW
GetParent
GetSystemMetrics
GetUpdateRect
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
HideCaret
InsertMenuItemW
InsertMenuW
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
IsWindow
IsWindowVisible
KillTimer
LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
MessageBeep
MessageBoxW
ModifyMenuW
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
ReleaseCapture
ReleaseDC
RemoveMenu
ScreenToClient
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetMenu
SetMenuItemInfoW
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowCaret
ShowCursor
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromPoint
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ