Static task
static1
Behavioral task
behavioral1
Sample
5e9e139f2a8b40f042c257e462e8785e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e9e139f2a8b40f042c257e462e8785e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e9e139f2a8b40f042c257e462e8785e_JaffaCakes118
-
Size
1.4MB
-
MD5
5e9e139f2a8b40f042c257e462e8785e
-
SHA1
85463b34a77ad6f38beab3dcaae6b4dccf44a18a
-
SHA256
acc3630b16771e22cb5ad8f374ef837667d36b078420a408a7aed5d160c82fd5
-
SHA512
380b1f53f2c1b954b9ce5fc24a43d8393662d4cb9e4371b06e0160882045d29e1c0eb2a094d1abbc4202221d58071a3e4f13d9fd46c2bd8dfa579c6a02332820
-
SSDEEP
24576:+4u6p8c1YzDcK6Dr71Dz86GtUWYOThc27NhP7jbc+z:t8sYncKstzmUWTTVhzjbbz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e9e139f2a8b40f042c257e462e8785e_JaffaCakes118
Files
-
5e9e139f2a8b40f042c257e462e8785e_JaffaCakes118.exe windows:4 windows x86 arch:x86
169e1bc34d376b3e4fb0aca7bcb2cd68
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawTextW
CopyRect
CalcMenuBar
DialogBoxParamA
GetMenu
GetWindowTextLengthA
IsMenu
CopyIcon
AppendMenuA
CloseWindow
GetFocus
CopyImage
AlignRects
DialogBoxParamW
GetDC
InsertMenuA
gdi32
DeleteDC
GetPixel
SetTextColor
GetPixel
DeleteObject
RestoreDC
GetBrushOrgEx
AddFontResourceExA
GetBitmapBits
AbortPath
AddFontResourceExW
ClearBrushAttributes
CloseFigure
ExcludeClipRect
AddFontResourceA
AddFontResourceTracking
AddFontResourceW
GetBrushOrgEx
CloseMetaFile
ExcludeClipRect
GetClipBox
RestoreDC
CreateSolidBrush
AddFontResourceExA
ClearBrushAttributes
GetCurrentPositionEx
AddFontResourceExW
BitBlt
CopyMetaFileA
kernel32
OpenFile
CreateThread
SetLastError
GetFileSize
CopyFileW
GetComputerNameA
ReadConsoleA
GetCPInfo
ReadFile
GetFileTime
GlobalFree
GetConsoleMode
Sleep
ExitThread
CreateThread
OpenFileMappingA
ExitThread
GetFileTime
DeleteAtom
ReadConsoleA
CreateProcessA
FindFirstFileA
GetConsoleMode
CopyFileW
DeleteFileW
ReadFile
GetStdHandle
FindAtomA
GetFileTime
CopyFileA
ReadFile
OpenFileMappingA
SetLastError
FindFirstFileA
Sleep
GetConsoleMode
CreateDirectoryA
GetComputerNameA
CopyFileExA
CreateThread
OpenFile
Sleep
FindFirstFileA
CopyFileExA
GlobalFree
CopyFileA
GetCommandLineA
GetFileTime
ReadConsoleA
OpenFile
ExitThread
SetLastError
WriteFile
ReadFile
SetLastError
CreateThread
GetFileSize
CopyFileExA
CopyFileW
CopyFileExW
GetCPInfo
FindFirstFileA
ExitThread
ReadFile
GetComputerNameA
CreateProcessA
GlobalFree
FindAtomA
OpenFileMappingA
advapi32
RegOpenKeyA
RegQueryInfoKeyA
RegReplaceKeyA
RegQueryValueA
RegLoadKeyA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExW
RegEnumKeyA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExA
RegEnumValueW
RegEnumValueA
RegOpenKeyW
RegDeleteValueW
RegGetKeySecurity
RegReplaceKeyW
comctl32
ImageList_Destroy
ImageList_LoadImageA
ImageList_Merge
ImageList_GetDragImage
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_Create
ImageList_DragShowNolock
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_AddIcon
ImageList_DragEnter
ImageList_GetImageRect
ImageList_DragMove
Sections
.text Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.2MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 675B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ