Static task
static1
Behavioral task
behavioral1
Sample
62c2a49eb118c9888329913ca5b0b4fd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62c2a49eb118c9888329913ca5b0b4fd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62c2a49eb118c9888329913ca5b0b4fd_JaffaCakes118
-
Size
80KB
-
MD5
62c2a49eb118c9888329913ca5b0b4fd
-
SHA1
1868a778b6a315e7f6ae4cd01409b121e1dc0dc7
-
SHA256
da3a3642f0729fbcb60dc3e25e3263023be8423536163b80fdaee694a2443d45
-
SHA512
04ab6fb8ee96a3da16e891b123ddd72b7a75fb5d66894999baeff23a2abb2ceaa43a14ea495310aaf2664732b762735ba0feee44b4b59c649f03b34f93bcd29c
-
SSDEEP
1536:LDwrDuZY2lY2Ymy98YfYjBJx/p+J/HyzUXRmjh0l:LMrDoYKyzfgrx/2XR8hc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62c2a49eb118c9888329913ca5b0b4fd_JaffaCakes118
Files
-
62c2a49eb118c9888329913ca5b0b4fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8f39f74cf20c13b5232cc3f18191a05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyIcon
GetCursor
EndDialog
CreateIcon
DrawTextW
DialogBoxParamW
GetDlgItem
AlignRects
LoadMenuA
CloseWindow
AppendMenuA
GetMenu
DialogBoxParamA
GetDC
DrawTextA
IsWindow
LoadCursorA
DrawIconEx
GetWindowTextLengthA
GetDC
GetWindowTextLengthA
GetCursor
AppendMenuW
DrawTextW
GetWindowTextA
CalcMenuBar
DrawIconEx
CopyRect
IsMenu
AlignRects
DrawIcon
CopyImage
BlockInput
EndDialog
DialogBoxParamA
LoadCursorA
advapi32
RegOpenKeyW
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueW
RegFlushKey
RegDeleteValueW
RegEnumValueW
RegEnumValueA
RegReplaceKeyA
RegGetKeySecurity
RegQueryInfoKeyW
RegLoadKeyA
RegQueryValueA
RegCreateKeyExA
RegLoadKeyW
RegEnumKeyExW
RegDeleteKeyW
RegEnumKeyA
RegCreateKeyW
kernel32
GetDateFormatA
Sleep
GetCommandLineA
GetModuleHandleA
lstrcatA
SetLastError
GetCPInfo
GetStringTypeA
CloseHandle
GetFileAttributesA
GlobalFree
GetLocalTime
FreeLibrary
GetLastError
GlobalAlloc
lstrcmpiA
GetModuleFileNameA
GetStdHandle
comctl32
ImageList_ReplaceIcon
ImageList_GetDragImage
ImageList_EndDrag
ImageList_AddIcon
ImageList_Merge
ImageList_DragLeave
ImageList_Draw
InitCommonControls
ImageList_GetIconSize
ImageList_GetImageRect
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_DragEnter
ImageList_Replace
ImageList_Read
ImageList_LoadImage
ImageList_Remove
ImageList_GetImageCount
ImageList_DrawIndirect
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 3KB - Virtual size: 663B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ