Static task
static1
Behavioral task
behavioral1
Sample
6103c3e07000665062fdbb70da95f6e6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6103c3e07000665062fdbb70da95f6e6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6103c3e07000665062fdbb70da95f6e6_JaffaCakes118
-
Size
1.2MB
-
MD5
6103c3e07000665062fdbb70da95f6e6
-
SHA1
2a077357e8e6128f8fb2231c23ef8f8003a3e6ed
-
SHA256
8f1abf731772d279a23d0236b9861a5fb9f70d9cffe81772067eb3425fde6a28
-
SHA512
8803ba2aa9dd3f1b5454ea9e813456de5af089848a60299552439c90ef59d775cd0acc03a847c1300ba8d1e883236dd812abca8cf27367a4b3df33723106f2cb
-
SSDEEP
24576:gTk0Asl25Wr4VQHGYBtf2tPCmZjR1MecNMaAHm7KLs9+5CT55F2P8G:gLAsQLSdPfuamZFpcr7KLM+0T4n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6103c3e07000665062fdbb70da95f6e6_JaffaCakes118
Files
-
6103c3e07000665062fdbb70da95f6e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
ea3f18043a1966db1dba5695734d5fb1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InsertMenuA
GetFocus
LoadCursorA
CalcMenuBar
IsWindow
CreateIcon
AppendMenuW
GetWindowTextLengthA
LoadMenuA
CopyRect
IsMenu
CopyImage
AppendMenuA
GetWindowTextA
GetMenu
GetDC
DialogBoxParamA
DrawIcon
CopyRect
CloseWindow
InsertMenuA
GetFocus
CreateIcon
GetWindowTextLengthA
AlignRects
CopyImage
GetCursor
GetMenu
GetWindowTextA
LoadMenuA
IsMenu
DialogBoxParamW
DialogBoxParamA
EndDialog
IsMenu
CreateIcon
InsertMenuA
AlignRects
GetDC
EndDialog
BlockInput
AppendMenuW
CloseWindow
DialogBoxParamA
LoadMenuA
GetMenu
CopyImage
GetWindowTextA
CalcMenuBar
GetCursor
DrawIcon
DrawIconEx
GetWindowTextLengthA
CloseWindow
DrawIcon
BlockInput
DrawTextW
DrawIconEx
GetDlgItem
EndDialog
DialogBoxParamA
GetWindowTextA
LoadCursorA
AlignRects
LoadMenuA
CalcMenuBar
CopyImage
CopyRect
kernel32
CopyFileA
GetCommandLineA
Sleep
DeleteFileW
CopyFileW
ReadConsoleA
GetStdHandle
FindFirstFileA
GetFileSize
CreateThread
CopyFileExA
DeleteFileA
OpenFile
DeleteAtom
CreateDirectoryA
GetLastError
GetCPInfo
CopyFileA
DeleteFileA
GetLastError
GetFileSize
CopyFileExA
GetFileTime
Sleep
ReadConsoleW
FindAtomA
DeleteAtom
GetCommandLineA
CopyFileExW
CreateDirectoryA
CreateThread
GetLastError
CreateProcessA
ReadConsoleA
CopyFileW
GetFileTime
CreateDirectoryA
GetComputerNameA
FindFirstFileA
OpenFile
WriteFile
CopyFileExA
ExitThread
DeleteAtom
GetConsoleMode
CopyFileExW
CreateThread
advapi32
RegEnumKeyA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyA
RegOpenKeyW
RegDeleteValueW
RegFlushKey
RegQueryValueExA
RegEnumKeyExA
RegQueryValueA
RegEnumKeyExW
RegDeleteKeyW
RegReplaceKeyA
RegReplaceKeyW
RegEnumKeyA
RegEnumValueW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyExA
RegOpenKeyExA
RegEnumKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegDeleteValueA
RegCreateKeyW
RegLoadKeyW
RegReplaceKeyA
RegDeleteKeyW
RegQueryInfoKeyW
RegOpenKeyW
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.1MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.stls Size: 512B - Virtual size: 162B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ