Static task
static1
Behavioral task
behavioral1
Sample
5c90214321f8ab36ceeaab75b4fff560_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c90214321f8ab36ceeaab75b4fff560_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c90214321f8ab36ceeaab75b4fff560_JaffaCakes118
-
Size
109KB
-
MD5
5c90214321f8ab36ceeaab75b4fff560
-
SHA1
0930dad9249273b96b3c48d41bb77498171d0910
-
SHA256
57c1392aebd3ae048746a07076fb093ff5bb1516e4cd3326ee212b2c7f6ae226
-
SHA512
201bdba521cbe562b7eaadc3108d66316e364618b80d9d105cd2ad32fcf00eefeade93ef53502bef5c7ff49c6cc8a34165a3a002996c9c0b65cdc865f2fc66e8
-
SSDEEP
1536:7SCaRpLwrbuFp7eYvepGyjpwDOzeR4v+1v5UyFd4hrZGy:6UrbuFpQp+8eTv5ir
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c90214321f8ab36ceeaab75b4fff560_JaffaCakes118
Files
-
5c90214321f8ab36ceeaab75b4fff560_JaffaCakes118.exe windows:4 windows x86 arch:x86
b580ba140cb2a527bae934847cfd2799
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegReplaceKeyW
RegQueryValueExW
RegEnumValueA
RegEnumValueW
RegDeleteValueA
RegEnumKeyW
RegCreateKeyExW
RegOpenKeyExA
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExA
RegCreateKeyW
RegLoadKeyA
RegGetKeySecurity
RegDeleteKeyA
RegQueryInfoKeyA
RegLoadKeyW
RegOpenKeyExW
RegEnumValueW
RegGetKeySecurity
RegEnumKeyW
RegQueryInfoKeyA
RegQueryValueW
RegCreateKeyW
RegDeleteKeyA
RegQueryInfoKeyW
RegEnumKeyExW
RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegLoadKeyA
RegDeleteValueW
RegQueryValueExW
RegLoadKeyW
RegOpenKeyExW
RegOpenKeyA
RegEnumValueA
RegDeleteKeyW
kernel32
FindFirstFileA
SetLastError
DeleteFileA
GetStdHandle
ReadFile
GetLastError
CopyFileExA
CopyFileW
CreateProcessA
GetCommandLineA
GlobalFree
GetCPInfo
CopyFileA
CopyFileExW
GetComputerNameA
ExitThread
FindAtomA
WriteFile
OpenFileMappingA
ReadConsoleA
comctl32
DrawStatusTextA
CreateStatusWindow
ImageList_AddIcon
ImageList_Copy
ImageList_Create
DrawStatusText
MakeDragList
CreateToolbarEx
ImageList_Add
CreateToolbar
ImageList_Destroy
MenuHelp
CreateUpDownControl
ImageList_DragLeave
InitCommonControls
DllGetVersion
DrawStatusTextW
DrawInsert
ImageList_DragEnter
CreateToolbar
user32
GetMenu
DialogBoxParamA
CalcMenuBar
GetCursor
InsertMenuA
IsMenu
GetDlgItem
GetDC
DialogBoxParamW
CloseWindow
LoadMenuA
GetFocus
GetWindowTextLengthA
EndDialog
GetWindowTextA
CopyIcon
AlignRects
LoadCursorA
CreateIcon
AppendMenuW
DialogBoxParamA
CalcMenuBar
IsMenu
AppendMenuA
DrawTextA
DrawIcon
CloseWindow
InsertMenuA
BlockInput
DialogBoxParamW
DrawIconEx
GetDlgItem
CreateIcon
AlignRects
LoadMenuA
CopyRect
CopyImage
IsWindow
GetWindowTextA
GetCursor
gdi32
GetCurrentPositionEx
CancelDC
GetPixel
CloseFigure
AddFontResourceExW
CopyMetaFileA
CreateSolidBrush
AddFontResourceW
CloseMetaFile
AddFontMemResourceEx
GetPixel
AbortPath
DeleteDC
BitBlt
AddFontResourceTracking
ExtTextOutA
DeleteObject
ClearBitmapAttributes
AddFontResourceExA
GetClipBox
BeginPath
AddFontResourceW
BitBlt
GetPixel
ExcludeClipRect
SetTextColor
AddFontMemResourceEx
AddFontResourceTracking
ClearBitmapAttributes
ClearBrushAttributes
ExtTextOutA
GetDCOrgEx
AddFontResourceExA
CreateSolidBrush
AddFontResourceA
AddFontResourceExW
GetBitmapBits
CloseFigure
CloseMetaFile
GetPixel
shell32
DragFinish
ExtractIconEx
ExtractIconA
SHFindFiles
SHDoDragDrop
FindExeDlgProc
DragQueryFileW
RestartDialog
PathGetShortPath
SHUpdateImageW
ShellAboutA
ExtractIconResInfoW
DragQueryPoint
ExtractIconExA
FreeIconList
DragQueryFile
CheckEscapesA
SHChangeNotifyDeregister
DragAcceptFiles
CheckEscapesW
ExtractIconResInfoA
DragQueryFileAorW
DragQueryPoint
RestartDialog
DllGetVersion
ExtractIconExA
DragAcceptFiles
ExtractIconA
CheckEscapesA
SHChangeNotifyRegister
SHFindFiles
DragFinish
DragQueryFileW
SHUpdateImageA
DragQueryFile
CheckEscapesW
SHChangeNotifyDeregister
ExtractIconResInfoW
SHDefExtractIconW
SHDefExtractIconA
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ