Static task
static1
Behavioral task
behavioral1
Sample
7062a224916470f92ddc76c435265383_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7062a224916470f92ddc76c435265383_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7062a224916470f92ddc76c435265383_JaffaCakes118
-
Size
64KB
-
MD5
7062a224916470f92ddc76c435265383
-
SHA1
aa0bde9b005b20007bc71f15929a47cc4e056e86
-
SHA256
3eb8c69f6a4d067f7fcefc5a91eb83f8dc81d0707700bd05801a9c101ec97669
-
SHA512
d4c0a8b9000b5abda2d1a8d9cc4f05efc5079a60e97cbd358e9cedadf0c21fad6b8a04189c66d6c575752fcc6fc4147ac5d5b31fcf28836f2840f3f6ca08923e
-
SSDEEP
768:hT9WQO5UsxZZSiMd7emBvBCP7RgeKFtKgKmPQThWMkhF0pAoIwfB7xG:5QQMSFZeEvBo7gTQk3iawNx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7062a224916470f92ddc76c435265383_JaffaCakes118
Files
-
7062a224916470f92ddc76c435265383_JaffaCakes118.exe windows:4 windows x86 arch:x86
de8804e77c7b8eb923a98d67a4def835
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegCreateKeyW
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumKeyExW
RegOpenKeyW
RegDeleteKeyW
RegOpenKeyExA
RegEnumKeyExA
RegReplaceKeyA
RegReplaceKeyW
RegEnumKeyA
RegDeleteKeyA
RegLoadKeyA
RegQueryValueA
RegEnumKeyExW
RegFlushKey
RegDeleteValueW
RegQueryValueExW
RegCreateKeyExA
RegEnumValueA
RegDeleteKeyW
RegOpenKeyW
RegDeleteValueA
RegEnumValueW
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegGetKeySecurity
RegOpenKeyExA
RegQueryValueExA
RegFlushKey
RegCreateKeyExA
RegQueryValueW
RegQueryInfoKeyW
RegEnumValueA
RegEnumKeyExA
RegEnumKeyExW
RegLoadKeyW
RegDeleteValueA
RegOpenKeyExW
user32
DialogBoxParamW
AppendMenuW
CopyImage
AlignRects
CloseWindow
DrawTextA
CreateIcon
DialogBoxParamA
DrawTextW
CopyRect
AppendMenuA
LoadMenuA
GetCursor
EndDialog
IsWindow
DrawIconEx
GetDlgItem
BlockInput
GetMenu
DrawTextA
DrawIcon
InsertMenuA
CalcMenuBar
AppendMenuW
CloseWindow
GetDC
LoadMenuA
DialogBoxParamA
EndDialog
CopyIcon
LoadCursorA
AlignRects
GetCursor
GetWindowTextLengthA
GetWindowTextA
AlignRects
IsMenu
BlockInput
DrawTextA
LoadCursorA
DialogBoxParamA
DrawIconEx
CopyIcon
GetWindowTextLengthA
CloseWindow
GetWindowTextA
DrawTextW
DrawIcon
LoadMenuA
CopyRect
AppendMenuW
comctl32
ImageList_ReplaceIcon
ImageList_Remove
ImageList_DrawIndirect
ImageList_DragLeave
ImageList_LoadImageW
ImageList_Merge
ImageList_Copy
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_Create
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_DrawEx
ImageList_GetImageRect
InitCommonControls
ImageList_GetDragImage
ImageList_Replace
ImageList_LoadImage
ImageList_GetImageCount
kernel32
GetComputerNameA
WriteFile
GetFileTime
CopyFileExW
DeleteFileW
DeleteAtom
OpenFileMappingA
GetFileSize
OpenFile
GetCommandLineA
GetStdHandle
SetLastError
FindAtomA
ExitThread
DeleteAtom
ReadConsoleA
CreateProcessA
OpenFile
CopyFileW
CopyFileExW
Sleep
OpenFileMappingA
DeleteFileA
GetCommandLineA
CopyFileA
GetLastError
ReadFile
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bbs Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ