Static task
static1
Behavioral task
behavioral1
Sample
64586ade6f9f4fa33708fbec8d8c32e3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
64586ade6f9f4fa33708fbec8d8c32e3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64586ade6f9f4fa33708fbec8d8c32e3_JaffaCakes118
-
Size
88KB
-
MD5
64586ade6f9f4fa33708fbec8d8c32e3
-
SHA1
99e626bed3299a63a6e5d47c1c8d41a765ae2d64
-
SHA256
1650575911570fe22e69d56a5a9ea6397da058b4f58560c04345ed5ffebe3519
-
SHA512
bcb16651d87102fe88b7e9b19b867f9a3bcde361231fb1b8259f86486dd6ec18130e157ef82a58ba2d5ead43662ba262c147e6c461c8e2453c07a7779af41566
-
SSDEEP
1536:9A90KqnRCkXtKOL4IUAXdmj7CBfPLc7oZRNe:yiKINLJ8CBfPI7oZe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64586ade6f9f4fa33708fbec8d8c32e3_JaffaCakes118
Files
-
64586ade6f9f4fa33708fbec8d8c32e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
b1f2c980d480d9882b0622358d889b3f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsMenu
GetWindowTextLengthA
CopyRect
CopyImage
CalcMenuBar
DialogBoxParamW
DialogBoxParamA
BlockInput
CopyIcon
DrawIcon
LoadMenuA
EndDialog
DrawIconEx
CloseWindow
AlignRects
InsertMenuA
AppendMenuA
CreateIcon
DrawTextW
comctl32
ImageList_DragEnter
ImageList_GetIconSize
ImageList_EndDrag
ImageList_GetDragImage
ImageList_DragLeave
ImageList_DragMove
InitCommonControls
ImageList_Remove
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_Create
ImageList_DrawIndirect
ImageList_LoadImage
ImageList_DrawEx
ImageList_GetImageRect
ImageList_LoadImageW
ImageList_BeginDrag
ImageList_Merge
ImageList_LoadImageA
ImageList_Read
gdi32
RestoreDC
GetDCOrgEx
DeleteObject
ExtTextOutA
GetCurrentPositionEx
CloseFigure
ExcludeClipRect
AddFontResourceExW
CopyMetaFileA
AddFontMemResourceEx
ClearBrushAttributes
CancelDC
CreateSolidBrush
SetTextColor
ClearBitmapAttributes
GetClipBox
GetPixel
kernel32
GetFileSize
lstrcpyA
GetFullPathNameA
WideCharToMultiByte
GetLastError
GetDateFormatA
GetModuleFileNameA
GetStringTypeA
GlobalAlloc
GetStringTypeW
CloseHandle
lstrlenA
GetCommandLineA
HeapAlloc
SetLastError
GlobalFree
lstrcatA
GetStdHandle
lstrcmpA
advapi32
RegGetKeySecurity
RegOpenKeyExA
RegOpenKeyW
RegEnumKeyExW
RegCreateKeyW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegQueryValueA
RegDeleteValueW
RegLoadKeyA
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueA
RegFlushKey
RegQueryValueW
RegQueryInfoKeyA
RegEnumValueA
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ