Static task
static1
Behavioral task
behavioral1
Sample
b46a703427585f13001fa04b09c916e1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b46a703427585f13001fa04b09c916e1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b46a703427585f13001fa04b09c916e1_JaffaCakes118
-
Size
62KB
-
MD5
b46a703427585f13001fa04b09c916e1
-
SHA1
34abf8a72a6b8cc105877ec659a8e46af197b87e
-
SHA256
461a04c7f62063ce552b65207abc5532de25e91a6aa677b73c4f062286db68d4
-
SHA512
c57cef291c89e61539f76dffebf75a9fed179bc6d7436bf26bfd296ece1ffe99d53a1c9fe8bd7cbccf710f779a56ab7b82993425da04e8592d3a632f375138fc
-
SSDEEP
768:kMl1XJ10V07WhtqZaYTGJA5/VsyBrFqBgmuvJ2d1aNQ05pO7B88moYmhwPb:kwXothsZaoGJA5/eUjPtNdO1xkme
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b46a703427585f13001fa04b09c916e1_JaffaCakes118
Files
-
b46a703427585f13001fa04b09c916e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f5dc90e36d29cf07f79e39ba11182645
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_Create
ImageList_Read
ImageList_Draw
ImageList_LoadImage
ImageList_AddIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_DragMove
ImageList_GetIcon
ImageList_LoadImageA
ImageList_GetDragImage
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_Copy
ImageList_Merge
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DrawIndirect
ImageList_Destroy
ImageList_Replace
ImageList_LoadImageW
ImageList_GetIcon
ImageList_DragEnter
InitCommonControls
ImageList_GetIconSize
ImageList_BeginDrag
ImageList_LoadImage
ImageList_DragMove
ImageList_Destroy
ImageList_DragShowNolock
ImageList_Draw
ImageList_Merge
ImageList_GetImageCount
ImageList_Replace
ImageList_Remove
ImageList_GetDragImage
ImageList_AddIcon
ImageList_AddMasked
ImageList_LoadImageA
ImageList_DrawEx
advapi32
RegLoadKeyW
RegQueryValueA
RegQueryValueExA
RegDeleteValueW
RegEnumKeyA
RegOpenKeyExA
RegFlushKey
RegOpenKeyExW
RegReplaceKeyA
RegEnumValueW
RegQueryValueExW
RegGetKeySecurity
RegQueryInfoKeyW
RegOpenKeyA
RegCreateKeyExW
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegReplaceKeyW
RegCreateKeyExW
RegQueryValueA
RegQueryInfoKeyA
RegDeleteKeyW
RegDeleteValueA
RegLoadKeyA
RegOpenKeyExW
RegOpenKeyA
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegCreateKeyW
RegQueryValueExA
RegFlushKey
RegEnumValueW
RegCreateKeyExA
kernel32
FindAtomA
ReadConsoleA
CreateThread
CreateDirectoryA
GlobalFree
ExitThread
GetFileSize
CreateProcessA
OpenFile
DeleteFileA
OpenFileMappingA
GetConsoleMode
GetStdHandle
GetCommandLineA
WriteFile
DeleteAtom
CopyFileA
CopyFileW
SetLastError
CopyFileExW
CopyFileExA
FindFirstFileA
CreateDirectoryA
GetCommandLineA
ExitThread
FindFirstFileA
GetConsoleMode
DeleteAtom
CopyFileA
CopyFileW
GetStdHandle
GetLastError
DeleteFileW
ReadConsoleA
SetLastError
CreateProcessA
WriteFile
DeleteFileA
OpenFileMappingA
GetCPInfo
OpenFile
CreateThread
GetFileSize
CopyFileExW
user32
GetCursor
GetFocus
CloseWindow
DialogBoxParamW
IsWindow
GetWindowTextLengthA
DrawIcon
LoadMenuA
DrawTextW
GetWindowTextA
CopyIcon
DrawIconEx
AlignRects
AppendMenuA
CopyRect
CalcMenuBar
GetDlgItem
AppendMenuW
CopyImage
DrawIcon
GetWindowTextA
IsWindow
BlockInput
EndDialog
GetCursor
DialogBoxParamA
LoadMenuA
CopyRect
CreateIcon
CopyIcon
GetDC
AlignRects
GetDlgItem
LoadCursorA
CopyImage
CalcMenuBar
DrawIconEx
AppendMenuA
DialogBoxParamA
IsMenu
CreateIcon
GetCursor
LoadMenuA
AlignRects
GetWindowTextLengthA
GetMenu
GetDC
DialogBoxParamW
InsertMenuA
CopyRect
GetCursor
DrawTextA
GetDC
CopyIcon
AlignRects
IsWindow
DialogBoxParamW
AppendMenuW
EndDialog
CopyRect
CreateIcon
GetFocus
DrawIcon
CalcMenuBar
LoadCursorA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ