Static task
static1
Behavioral task
behavioral1
Sample
89d51fd55935f79c90106ab2c5b2ff66_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
89d51fd55935f79c90106ab2c5b2ff66_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89d51fd55935f79c90106ab2c5b2ff66_JaffaCakes118
-
Size
92KB
-
MD5
89d51fd55935f79c90106ab2c5b2ff66
-
SHA1
98f9c65fbf5d13f5a2e3125bf94c49aff73a73de
-
SHA256
e60a653b9f979d27a44e15565cd2d6b7c92ae9cdacb76461e681d5961a2c1194
-
SHA512
216964764805c21d713fd4e8b6c52ab5845e2783186dddfd356318d5e7775c19d9558394bb219028aad12c69d60e0437fc7ad55045320e4f3ce4c670a3165624
-
SSDEEP
1536:W73+h+SHla54hID5wuuxYJJjfZuWlnRBq7oSfd6T2:O3q+SE58ID5pJVNSsSfd6T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89d51fd55935f79c90106ab2c5b2ff66_JaffaCakes118
Files
-
89d51fd55935f79c90106ab2c5b2ff66_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa0f324c061979f2ef4ba7213ef23284
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegGetKeySecurity
RegReplaceKeyW
RegDeleteValueA
RegQueryValueW
RegCreateKeyExA
RegCreateKeyW
RegQueryValueA
RegCreateKeyExW
RegQueryValueExW
RegEnumValueW
RegLoadKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegFlushKey
RegEnumValueA
RegReplaceKeyA
RegDeleteKeyA
kernel32
ReadConsoleW
DeleteAtom
CreateDirectoryA
GlobalFree
GetConsoleMode
CopyFileA
ReadConsoleA
GetCommandLineA
CopyFileExA
GetFileTime
GetStdHandle
WriteFile
CreateThread
GetLastError
FindAtomA
GetComputerNameA
DeleteFileW
DeleteFileA
SetLastError
user32
DrawTextW
CopyIcon
CreateIcon
CalcMenuBar
AppendMenuA
InsertMenuA
BlockInput
CloseWindow
IsWindow
DrawTextA
GetWindowTextA
AlignRects
LoadMenuA
GetWindowTextLengthA
LoadCursorA
GetDlgItem
GetCursor
CopyImage
comctl32
ImageList_LoadImageA
ImageList_Read
ImageList_DragLeave
ImageList_AddIcon
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Remove
ImageList_BeginDrag
ImageList_Draw
ImageList_GetIconSize
ImageList_Destroy
ImageList_GetImageRect
ImageList_Merge
ImageList_GetIcon
ImageList_LoadImageW
ImageList_LoadImage
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ