Static task
static1
Behavioral task
behavioral1
Sample
6f56b00c5c920f8b9dbf312b52e27a2d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f56b00c5c920f8b9dbf312b52e27a2d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
6f56b00c5c920f8b9dbf312b52e27a2d_JaffaCakes118
-
Size
112KB
-
MD5
6f56b00c5c920f8b9dbf312b52e27a2d
-
SHA1
6337290939beb7674e049c8a9a87a76e0b6c6819
-
SHA256
09c732459e2aedc775f36a52627bdb364e2eaf5654ac6e63e22a40f5c838382f
-
SHA512
f16116f7f14a2b1781637a1e87f8af1f90911c5d13a1d703ca5c6595f64cbbd3653b839f93fb8092a126d82ddf0d2bfc9d2e1725dabcb7403be7749be22a48f9
-
SSDEEP
1536:pF+HejuetFvJXPdLUlyfuauGWGYf92fM8Wi8Q+zio8h:+VetFx/dLUl8PxYsfeido8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f56b00c5c920f8b9dbf312b52e27a2d_JaffaCakes118
Files
-
6f56b00c5c920f8b9dbf312b52e27a2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
631705d6af0593f3dd0569a27b68d377
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomA
GetLastError
GetConsoleMode
CreateThread
SetLastError
CopyFileW
CopyFileA
DeleteFileW
ExitThread
GetFileTime
ReadFile
CopyFileExA
WriteFile
CreateDirectoryA
OpenFileMappingA
CopyFileExW
Sleep
GetComputerNameA
CreateProcessA
CopyFileA
FindAtomA
OpenFileMappingA
WriteFile
SetLastError
ReadConsoleA
CreateThread
ReadFile
OpenFile
GetCommandLineA
DeleteFileW
gdi32
GetPixel
GetDCOrgEx
SetTextColor
ClearBrushAttributes
RestoreDC
AddFontResourceA
BitBlt
AddFontMemResourceEx
AddFontResourceTracking
AbortPath
GetClipBox
CancelDC
CloseMetaFile
AddFontResourceExW
ExtTextOutA
DeleteDC
CreateSolidBrush
BeginPath
AddFontResourceExA
comctl32
ImageList_LoadImageA
ImageList_Merge
ImageList_AddIcon
ImageList_Draw
ImageList_GetIcon
ImageList_EndDrag
ImageList_BeginDrag
ImageList_LoadImage
ImageList_Remove
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_Read
ImageList_LoadImageW
ImageList_DragMove
ImageList_GetIconSize
ImageList_Remove
ImageList_Merge
ImageList_LoadImage
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_GetImageCount
ImageList_Read
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_GetImageRect
ImageList_BeginDrag
ImageList_DragMove
ImageList_EndDrag
advapi32
RegEnumKeyExW
RegReplaceKeyW
RegDeleteValueW
RegLoadKeyA
RegEnumValueW
RegQueryInfoKeyW
RegGetKeySecurity
RegDeleteValueA
RegOpenKeyExW
RegDeleteKeyA
RegEnumKeyW
RegQueryValueA
RegDeleteKeyW
RegReplaceKeyA
RegLoadKeyW
RegQueryInfoKeyW
RegCreateKeyW
RegLoadKeyW
RegQueryInfoKeyA
RegDeleteValueA
RegReplaceKeyA
RegReplaceKeyW
RegOpenKeyExA
RegFlushKey
RegQueryValueA
RegQueryValueExW
RegOpenKeyW
RegDeleteKeyA
RegDeleteKeyW
RegEnumValueW
RegQueryValueW
RegLoadKeyA
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyA
RegCreateKeyExA
RegEnumValueW
RegOpenKeyA
RegQueryValueW
RegLoadKeyW
RegOpenKeyExW
RegLoadKeyA
RegOpenKeyW
RegEnumValueA
RegGetKeySecurity
RegEnumKeyExW
RegEnumKeyW
RegQueryValueA
RegEnumKeyA
RegCreateKeyW
RegReplaceKeyW
RegDeleteKeyW
RegCreateKeyExW
RegDeleteKeyA
RegEnumKeyExA
RegQueryValueExA
RegEnumKeyW
RegDeleteValueA
RegQueryInfoKeyA
RegGetKeySecurity
RegReplaceKeyA
RegDeleteValueW
RegFlushKey
RegEnumValueW
RegCreateKeyW
RegOpenKeyExA
RegLoadKeyW
RegOpenKeyExW
user32
AlignRects
CloseWindow
CopyIcon
EndDialog
IsMenu
GetWindowTextA
LoadMenuA
DrawIconEx
DrawTextA
AppendMenuW
DialogBoxParamW
LoadCursorA
CopyImage
AppendMenuA
GetDlgItem
CalcMenuBar
InsertMenuA
GetMenu
CopyRect
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ