Static task
static1
Behavioral task
behavioral1
Sample
7652c55fe3d48fc8338643064cce8bd7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7652c55fe3d48fc8338643064cce8bd7_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
7652c55fe3d48fc8338643064cce8bd7_JaffaCakes118
-
Size
243KB
-
MD5
7652c55fe3d48fc8338643064cce8bd7
-
SHA1
9ff808ebc280181930e47773a47e5001db72ab8f
-
SHA256
e529c58f48604bd9674766e66a4a438318e5cf7ce8855cd8db828f3ac05693c0
-
SHA512
5ef8c1d843c3519d37ad92e0a8c2fc76154944684bef5a19ae49b94e5f644f116cbef974953c108d40c8962a458308a05b8d0a9ee1d98768130ed3859c868888
-
SSDEEP
3072:Qx1MQ/OkPJTV9bWItOWrnNnyNLcF7FxuEvp5rPgIHsh:Qx1z7zNNy67FZR1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7652c55fe3d48fc8338643064cce8bd7_JaffaCakes118
Files
-
7652c55fe3d48fc8338643064cce8bd7_JaffaCakes118.exe windows:4 windows x86 arch:x86
82deb5d634cfef91592f95dc4e333e64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
comctl32
ImageList_Create
ImageList_SetBkColor
InitCommonControls
gdi32
CreateCompatibleDC
CreateFontIndirectA
CreateSolidBrush
DeleteDC
DeleteObject
GetStockObject
GetTextExtentPoint32A
MoveToEx
SelectObject
SetBkColor
SetBkMode
SetBrushOrgEx
SetROP2
SetTextColor
kernel32
CloseHandle
CreateEventA
CreateFileA
CreateMutexA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadPriority
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
OpenMutexA
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
SetEvent
SetFilePointer
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
oleaut32
SysAllocStringLen
SysFreeString
SysReAllocStringLen
shell32
ShellExecuteA
user32
CallWindowProcA
CharLowerBuffW
CharUpperBuffW
ClientToScreen
CopyImage
CreateWindowExA
DefWindowProcA
DestroyIcon
DestroyWindow
DispatchMessageA
DrawTextA
FillRect
GetCapture
GetClassInfoA
GetClassLongA
GetClientRect
GetCursorPos
GetDC
GetFocus
GetForegroundWindow
GetKeyNameTextA
GetKeyState
GetParent
GetPropA
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
InflateRect
InvalidateRect
IsWindow
IsWindowEnabled
IsWindowVisible
LoadCursorA
LoadIconA
LoadStringA
MapVirtualKeyA
MessageBoxA
OffsetRect
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
RegisterWindowMessageA
ReleaseDC
RemovePropA
ScreenToClient
SendMessageA
SetCursor
SetFocus
SetForegroundWindow
SetParent
SetPropA
SetWindowLongA
SetWindowPos
ShowWindow
TranslateMessage
WaitMessage
winmm
mixerGetDevCapsA
mixerGetNumDevs
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE