Static task
static1
Behavioral task
behavioral1
Sample
765a17ea6657b9cd3fd433f73f08a38c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
765a17ea6657b9cd3fd433f73f08a38c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
765a17ea6657b9cd3fd433f73f08a38c_JaffaCakes118
-
Size
116KB
-
MD5
765a17ea6657b9cd3fd433f73f08a38c
-
SHA1
c0c4c36d09913171a4276346df21084d645d3977
-
SHA256
d5f06910ad3f175cadb2ae21c7da98d6d4eed3ab5ba9fee2a09350b2475c742c
-
SHA512
b69f13af0cf0ed45f9cddf1c08f9f07b2ba665b9c6d9cccb4bfeae5bdcdefbf0454f9c9ecde5b192ddaa99b4e5c3446a1444c2a6904fce8d6eac8bf72a4d4c47
-
SSDEEP
1536:3+wC6coubBh1MpbFQB5B5UVeZiMRmJ46R69SxzzU23z5Z:3zuNfMYB50e8MXoZx3U23
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 765a17ea6657b9cd3fd433f73f08a38c_JaffaCakes118
Files
-
765a17ea6657b9cd3fd433f73f08a38c_JaffaCakes118.exe windows:4 windows x86 arch:x86
7b026f375d26a154d936f0368d047c56
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegDeleteValueW
RegOpenKeyExA
RegEnumKeyExW
RegQueryValueA
RegLoadKeyW
RegCreateKeyW
RegCreateKeyExA
RegEnumValueA
RegGetKeySecurity
RegQueryValueExA
RegDeleteValueA
RegEnumValueW
kernel32
GetFileSize
GlobalFree
GetConsoleMode
ExitThread
ReadConsoleA
GetCPInfo
GetCommandLineA
GetFileTime
FindFirstFileA
DeleteFileW
WriteFile
OpenFileMappingA
CreateThread
GetCommandLineA
GetConsoleMode
CopyFileW
CopyFileA
ReadFile
GetComputerNameA
CopyFileExA
DeleteAtom
CopyFileExW
FindFirstFileA
GlobalFree
CreateDirectoryA
GetLastError
GetConsoleMode
CreateProcessA
CopyFileW
ReadFile
DeleteFileA
GlobalFree
ExitThread
DeleteAtom
CopyFileExW
WriteFile
OpenFile
comctl32
ImageList_DragMove
ImageList_EndDrag
ImageList_Read
ImageList_Replace
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_DrawEx
ImageList_AddIcon
ImageList_DrawIndirect
ImageList_LoadImageA
InitCommonControls
ImageList_DragLeave
ImageList_Copy
ImageList_Create
ImageList_GetDragImage
ImageList_Remove
ImageList_GetImageCount
ImageList_Draw
ImageList_LoadImage
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_GetImageRect
ImageList_Replace
InitCommonControls
ImageList_AddIcon
ImageList_LoadImage
ImageList_Draw
ImageList_GetImageInfo
ImageList_DragLeave
ImageList_Destroy
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetDragImage
ImageList_DragLeave
ImageList_Draw
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_DragEnter
ImageList_Merge
ImageList_Destroy
ImageList_Copy
ImageList_BeginDrag
ImageList_GetImageRect
ImageList_ReplaceIcon
ImageList_LoadImage
ImageList_DragMove
ImageList_GetImageCount
ImageList_AddMasked
InitCommonControls
user32
DrawTextW
GetMenu
IsMenu
AlignRects
DrawIconEx
CopyRect
EndDialog
DialogBoxParamW
AppendMenuA
CalcMenuBar
GetCursor
DialogBoxParamA
CopyIcon
DrawTextA
GetDlgItem
gdi32
CreateSolidBrush
GetPixel
BitBlt
GetBitmapBits
ExtTextOutA
GetClipBox
GetPixel
AbortPath
CopyMetaFileA
ExcludeClipRect
CancelDC
GetCurrentPositionEx
AddFontResourceExW
DeleteDC
AddFontMemResourceEx
AddFontResourceW
AddFontResourceTracking
RestoreDC
GetDCOrgEx
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 239B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ