Static task
static1
Behavioral task
behavioral1
Sample
72e5b0cde0f8cd6b596c3c20a0b23b76_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
72e5b0cde0f8cd6b596c3c20a0b23b76_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72e5b0cde0f8cd6b596c3c20a0b23b76_JaffaCakes118
-
Size
121KB
-
MD5
72e5b0cde0f8cd6b596c3c20a0b23b76
-
SHA1
c6ea0ab1087b22172a6890795564e3a6d322aa88
-
SHA256
d1bbfdf0e5baa9b8ac2c1f78aa8b5e5c28dbb81ab230a918427a138dff018a24
-
SHA512
c199556e22152038195bdb5710208601a74e804708185b612fb378e24f8ca26b97f49d724cb68eea9fa1a1735de09098af2657ef0829583348f5f0c9fe3d4745
-
SSDEEP
1536:riPbJluIb1aVtrl/yN3xwc1GGUF9IUZVRjI6W0:ibEVj/43xwjGky+vI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72e5b0cde0f8cd6b596c3c20a0b23b76_JaffaCakes118
Files
-
72e5b0cde0f8cd6b596c3c20a0b23b76_JaffaCakes118.exe windows:4 windows x86 arch:x86
76b5bf285c86b284faa98d719cec4993
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
ExcludeClipRect
DeleteDC
AbortPath
GetPixel
ExtTextOutA
DeleteObject
CloseMetaFile
AddFontResourceExW
GetPixel
GetClipBox
GetBitmapBits
ClearBitmapAttributes
GetDCOrgEx
BeginPath
AddFontResourceA
BitBlt
ClearBrushAttributes
SetTextColor
AddFontResourceW
CopyMetaFileA
ExtTextOutA
AddFontResourceA
GetDCOrgEx
BitBlt
AddFontResourceTracking
CancelDC
AddFontResourceExW
SetTextColor
ClearBrushAttributes
GetCurrentPositionEx
CloseMetaFile
CloseFigure
ClearBrushAttributes
BeginPath
DeleteObject
ExtTextOutA
BitBlt
CloseFigure
AddFontResourceW
ExcludeClipRect
CloseMetaFile
CancelDC
AddFontResourceExW
CreateSolidBrush
AddFontResourceTracking
CloseMetaFile
BitBlt
SetTextColor
ClearBrushAttributes
BeginPath
CancelDC
AddFontResourceW
GetCurrentPositionEx
GetBrushOrgEx
kernel32
CreateDirectoryA
OpenFileMappingA
CopyFileExA
ReadFile
GetFileSize
GetStdHandle
ReadConsoleA
GetComputerNameA
OpenFile
GetLastError
GetCommandLineA
comctl32
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_Merge
ImageList_Copy
InitCommonControls
ImageList_GetIcon
ImageList_Destroy
ImageList_Remove
ImageList_DrawEx
ImageList_AddIcon
ImageList_LoadImageA
ImageList_ReplaceIcon
ImageList_Merge
ImageList_AddMasked
InitCommonControls
ImageList_Create
ImageList_Copy
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Remove
ImageList_GetDragImage
ImageList_Replace
ImageList_LoadImage
ImageList_GetImageRect
ImageList_DragEnter
ImageList_DrawIndirect
ImageList_Read
ImageList_LoadImage
ImageList_GetDragImage
ImageList_GetIcon
ImageList_Merge
ImageList_DrawEx
ImageList_DragMove
ImageList_Create
ImageList_LoadImageA
ImageList_GetIconSize
ImageList_DragShowNolock
ImageList_Copy
ImageList_LoadImageW
ImageList_AddIcon
ImageList_DragLeave
advapi32
RegEnumKeyW
RegEnumValueW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueW
RegDeleteKeyA
RegOpenKeyExW
RegLoadKeyW
RegReplaceKeyA
RegLoadKeyA
RegEnumKeyExA
RegOpenKeyW
RegQueryValueW
RegQueryInfoKeyW
RegOpenKeyA
RegDeleteValueW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegCreateKeyExW
RegGetKeySecurity
RegReplaceKeyA
RegFlushKey
RegCreateKeyW
RegEnumKeyExA
RegReplaceKeyW
RegQueryValueA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 121B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ