Static task
static1
Behavioral task
behavioral1
Sample
963456be2198de871356a3b8714c116a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
963456be2198de871356a3b8714c116a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
963456be2198de871356a3b8714c116a_JaffaCakes118
-
Size
1.5MB
-
MD5
963456be2198de871356a3b8714c116a
-
SHA1
1d91a3affd1a47d69f7e4ca8164e9bbcb0c8f9fd
-
SHA256
43d505f1954e3d3a3e8904697a8e7da7c302e36cf331d3ea09fc6e3cae430c5b
-
SHA512
d0c6d23a96adb86046c2642af966bfdeadbcb02fd8ca511152c959132f19f209577989a6409ae619a12da845078f0c13f0f0407a29d0c9d6f1623981f2f35b0b
-
SSDEEP
24576:LEYtxN6zJ5SnOLtZPOIWp03PnBPCorb5:YW0J5FtZxLfIo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 963456be2198de871356a3b8714c116a_JaffaCakes118
Files
-
963456be2198de871356a3b8714c116a_JaffaCakes118.exe windows:4 windows x86 arch:x86
5fa833bb92cbb360c5e63a2736b761b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegLoadKeyW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueA
RegQueryValueExA
RegQueryInfoKeyW
RegEnumKeyW
RegEnumKeyA
RegCreateKeyW
RegCreateKeyExA
RegReplaceKeyW
RegEnumKeyExW
RegOpenKeyW
RegQueryValueA
RegDeleteKeyA
RegEnumValueW
RegFlushKey
RegEnumKeyA
RegOpenKeyExA
RegLoadKeyA
RegEnumKeyW
RegOpenKeyW
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyA
RegEnumValueW
RegCreateKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteValueW
RegEnumValueA
RegQueryInfoKeyW
RegGetKeySecurity
kernel32
GetConsoleMode
ReadFile
GetStdHandle
CopyFileW
CopyFileExA
CopyFileExW
CopyFileA
CreateThread
DeleteAtom
OpenFileMappingA
DeleteFileW
ExitThread
OpenFile
GetCommandLineA
SetLastError
Sleep
GlobalFree
GetComputerNameA
ReadConsoleA
FindFirstFileA
GetFileTime
CreateDirectoryA
GetFileSize
ReadFile
CreateThread
ReadConsoleW
FindAtomA
GetStdHandle
FindFirstFileA
GetCPInfo
OpenFile
Sleep
ExitThread
WriteFile
OpenFileMappingA
GetLastError
SetLastError
CopyFileExW
SetLastError
Sleep
FindFirstFileA
GetCommandLineA
GlobalFree
CreateDirectoryA
DeleteFileA
GetFileSize
CopyFileExW
GetStdHandle
OpenFileMappingA
CopyFileExA
CopyFileW
GetFileTime
FindAtomA
ReadConsoleW
GetCPInfo
GetComputerNameA
WriteFile
gdi32
GetPixel
CopyMetaFileA
BeginPath
BitBlt
RestoreDC
GetCurrentPositionEx
CloseFigure
AddFontResourceW
DeleteObject
GetPixel
CreateSolidBrush
ClearBitmapAttributes
AddFontResourceA
ClearBrushAttributes
SetTextColor
ExtTextOutA
DeleteDC
CancelDC
GetBrushOrgEx
GetBitmapBits
AddFontResourceExW
Sections
.text Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.2MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 263B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 460B
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ