Static task
static1
Behavioral task
behavioral1
Sample
8310472ced319a91df645ceff22f19d2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8310472ced319a91df645ceff22f19d2_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
8310472ced319a91df645ceff22f19d2_JaffaCakes118
-
Size
75KB
-
MD5
8310472ced319a91df645ceff22f19d2
-
SHA1
b19b3b0edc60a37b7abb064a0e650213db40c8b6
-
SHA256
ed50a90b126da0934b9b9931dffe7f5d09d976244942d93c3694073fc06c02cc
-
SHA512
9dc9d50e8720a45303e42079d916add923baccacb046c095ef7ff517f6b8afc3a33411ff8132e028af8129e657b22ca6746010080d3914d5c83a01dcc85b1612
-
SSDEEP
1536:RB44ucgStY4Vlwc6g7eO+iOO7zXsDU7JvLUgelVjgkt2h/p8ZAliIfOT:RC4ukrV+c6gqOWO8mJv4ZEyYpEA4V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8310472ced319a91df645ceff22f19d2_JaffaCakes118
Files
-
8310472ced319a91df645ceff22f19d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2dc9efb6ec3ec41dab96bbdc3cd9601
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyRect
GetCursor
LoadMenuA
DrawIconEx
GetWindowTextLengthA
GetMenu
LoadCursorA
IsMenu
GetDC
CopyIcon
DialogBoxParamW
InsertMenuA
DrawIcon
CloseWindow
GetWindowTextA
DrawTextW
CopyImage
EndDialog
CreateIcon
DialogBoxParamA
GetDlgItem
IsWindow
kernel32
GetCommandLineA
LCMapStringW
MultiByteToWideChar
GetVersion
GetCPInfo
GetStdHandle
lstrcatA
lstrcpynW
LCMapStringA
SetFilePointer
GetStringTypeA
GetModuleFileNameA
SetHandleCount
lstrcpyA
GetOEMCP
TerminateProcess
GetStringTypeW
GetStartupInfoA
WriteFile
GetFileType
CreateFileA
lstrcpynA
comctl32
ImageList_Copy
ImageList_Destroy
InitCommonControls
CreateMappedBitmap
ImageList_EndDrag
CreateToolbar
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_Draw
ImageList_Add
DrawStatusText
DllGetVersion
ImageList_Create
advapi32
RegEnumKeyW
RegEnumKeyExA
RegCreateKeyExW
RegEnumValueA
RegDeleteKeyW
RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegSetValueW
RegQueryValueA
RegSetValueA
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 17.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 35B
IMAGE_SCN_MEM_READ