Static task
static1
Behavioral task
behavioral1
Sample
a32d6022d8d9f9f19ed22b93e8b817b7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a32d6022d8d9f9f19ed22b93e8b817b7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a32d6022d8d9f9f19ed22b93e8b817b7_JaffaCakes118
-
Size
1.4MB
-
MD5
a32d6022d8d9f9f19ed22b93e8b817b7
-
SHA1
4f7321894322da2905907778fbf5787fb794bd96
-
SHA256
43229889c04da505e433eb90b433e162da43fb0e72f8621d7b57351a3c11371a
-
SHA512
1af80e3ad64aa90a76648a31accbc9cbd93cb5630bfe32d6d73feb5d18946243580f3d14c539bafe2e15007d9e8b9ade62742974e90cdc9a20c530018114f674
-
SSDEEP
24576:ZYABSx1VZ9kqjU5dJY94SFcKd/ZzhTcldb+7+DFWYtEy53CzJg:ZAza55dJpIcSfcLbm+DFWC5Sz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a32d6022d8d9f9f19ed22b93e8b817b7_JaffaCakes118
Files
-
a32d6022d8d9f9f19ed22b93e8b817b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
bcf01d372829da84adfd0a96445c8407
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteDC
GetPixel
GetDCOrgEx
SetTextColor
AddFontResourceW
ClearBitmapAttributes
CopyMetaFileA
AddFontMemResourceEx
BitBlt
GetClipBox
RestoreDC
ExcludeClipRect
ExtTextOutA
AbortPath
DeleteObject
AddFontMemResourceEx
RestoreDC
GetPixel
CloseFigure
SetTextColor
AddFontResourceExA
CopyMetaFileA
DeleteObject
BitBlt
CancelDC
GetPixel
BeginPath
GetCurrentPositionEx
GetBrushOrgEx
ExtTextOutA
ExtTextOutA
CloseMetaFile
CancelDC
GetPixel
CopyMetaFileA
SetTextColor
AbortPath
AddFontResourceTracking
RestoreDC
CloseFigure
GetBitmapBits
GetCurrentPositionEx
CreateSolidBrush
DeleteDC
AddFontResourceExA
DeleteObject
comctl32
ImageList_LoadImageW
ImageList_Copy
ImageList_Draw
ImageList_Create
ImageList_Destroy
ImageList_Remove
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_GetImageCount
ImageList_Replace
ImageList_GetDragImage
ImageList_GetIcon
ImageList_DragShowNolock
ImageList_GetIconSize
ImageList_ReplaceIcon
InitCommonControls
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_Merge
ImageList_Read
ImageList_DrawEx
ImageList_Copy
ImageList_AddIcon
ImageList_BeginDrag
ImageList_Remove
ImageList_EndDrag
ImageList_Draw
ImageList_Destroy
ImageList_GetDragImage
ImageList_DrawIndirect
advapi32
RegEnumKeyExA
RegReplaceKeyA
RegDeleteKeyW
RegQueryValueW
RegLoadKeyA
RegEnumKeyA
RegEnumValueW
RegDeleteValueA
RegCreateKeyExA
RegDeleteValueW
RegLoadKeyA
RegGetKeySecurity
RegQueryValueW
RegCreateKeyExA
RegQueryValueA
RegEnumValueW
RegEnumKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
user32
AppendMenuW
AlignRects
CalcMenuBar
DrawTextW
CopyImage
GetCursor
IsWindow
InsertMenuA
CreateIcon
DialogBoxParamW
CopyIcon
LoadCursorA
AppendMenuA
GetCursor
LoadCursorA
GetMenu
GetDC
DrawTextA
DialogBoxParamA
CopyIcon
IsWindow
AppendMenuA
CopyImage
IsMenu
DrawIcon
EndDialog
GetWindowTextLengthA
LoadMenuA
EndDialog
DialogBoxParamW
CopyRect
CopyIcon
CopyImage
GetDlgItem
DrawIconEx
DrawTextA
IsMenu
GetWindowTextA
CreateIcon
GetDC
AppendMenuW
AlignRects
BlockInput
DrawTextW
EndDialog
GetWindowTextA
InsertMenuA
LoadCursorA
DialogBoxParamW
DrawIconEx
GetDC
BlockInput
GetDlgItem
GetFocus
DrawIcon
DrawTextA
CopyIcon
CalcMenuBar
Sections
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.2MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 267B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 846B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ