Static task
static1
Behavioral task
behavioral1
Sample
b82bfaf2e4a62ec659b8e46e5a5b9650_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b82bfaf2e4a62ec659b8e46e5a5b9650_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b82bfaf2e4a62ec659b8e46e5a5b9650_JaffaCakes118
-
Size
42KB
-
MD5
b82bfaf2e4a62ec659b8e46e5a5b9650
-
SHA1
02ddc8b2598afccc850718b49aa9e3ec01c67b6e
-
SHA256
ecf6df36bb131857a5526884e06827b4da0142a5108d282775ff1e3dab58c689
-
SHA512
a2f31d83cc3563df8b723ca06c8b91077085a49fef5ea2d2e1ab1110423fec2988cfec2e080e14ff9791a9f42621771d33360061fc0225b32763096c3fcf006b
-
SSDEEP
768:ubWqLNXVETtBcPS7PtsUyJKRq39mGbmA4x2fo3/o3:PcCLiMtshJ0qNmGbBQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b82bfaf2e4a62ec659b8e46e5a5b9650_JaffaCakes118
Files
-
b82bfaf2e4a62ec659b8e46e5a5b9650_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b49665e0455602df52d02bfbb673bca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Read
ImageList_DragMove
ImageList_AddMasked
ImageList_DrawEx
ImageList_Draw
ImageList_DragEnter
ImageList_LoadImageA
ImageList_GetIcon
InitCommonControls
ImageList_GetImageInfo
ImageList_Replace
ImageList_GetDragImage
ImageList_Create
ImageList_Destroy
ImageList_DragLeave
ImageList_GetIconSize
ImageList_DrawIndirect
ImageList_DragMove
ImageList_GetImageRect
ImageList_DragEnter
ImageList_Destroy
ImageList_GetDragImage
ImageList_LoadImage
ImageList_AddIcon
ImageList_Draw
ImageList_Create
ImageList_GetIcon
ImageList_DragLeave
ImageList_LoadImageA
ImageList_Read
ImageList_BeginDrag
ImageList_Merge
ImageList_AddMasked
ImageList_LoadImageW
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Replace
ImageList_EndDrag
ImageList_GetIcon
InitCommonControls
ImageList_GetDragImage
ImageList_EndDrag
ImageList_Draw
ImageList_DragShowNolock
ImageList_Destroy
ImageList_GetImageRect
ImageList_ReplaceIcon
ImageList_Remove
ImageList_LoadImageW
ImageList_LoadImage
ImageList_GetIconSize
ImageList_Create
ImageList_DragEnter
ImageList_AddMasked
ImageList_GetImageCount
ImageList_DragLeave
ImageList_AddIcon
ImageList_GetImageInfo
ImageList_Replace
ImageList_Remove
ImageList_DragMove
ImageList_GetImageRect
ImageList_GetIcon
ImageList_GetIconSize
ImageList_Copy
ImageList_DragShowNolock
ImageList_Destroy
ImageList_GetImageCount
ImageList_LoadImageW
ImageList_Read
ImageList_EndDrag
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_LoadImage
ImageList_AddIcon
ImageList_DragEnter
ImageList_DrawIndirect
ImageList_Merge
ImageList_GetDragImage
ImageList_Create
kernel32
CopyFileExW
ReadConsoleA
CreateDirectoryA
GetFileSize
GetStdHandle
ExitThread
GetCPInfo
GetCommandLineA
CreateThread
WriteFile
GetLastError
DeleteFileW
OpenFile
GetComputerNameA
FindAtomA
DeleteAtom
Sleep
SetLastError
GlobalFree
CreateProcessA
advapi32
RegDeleteValueA
RegLoadKeyW
RegCreateKeyW
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExA
RegGetKeySecurity
RegEnumValueA
RegQueryInfoKeyW
RegDeleteValueW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyA
RegFlushKey
RegEnumValueW
RegReplaceKeyW
RegEnumKeyA
RegDeleteKeyW
RegFlushKey
RegEnumKeyW
RegOpenKeyW
RegDeleteValueA
RegCreateKeyExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegReplaceKeyW
RegDeleteValueW
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegOpenKeyExW
RegCreateKeyW
RegQueryValueExW
RegLoadKeyW
RegOpenKeyA
RegEnumValueW
RegQueryValueW
RegReplaceKeyA
RegEnumKeyA
RegEnumValueA
user32
CloseWindow
DrawTextA
GetWindowTextLengthA
IsMenu
BlockInput
EndDialog
CalcMenuBar
LoadMenuA
GetWindowTextA
AppendMenuA
DialogBoxParamW
DrawIcon
CopyImage
LoadCursorA
CopyIcon
GetFocus
AppendMenuW
GetDC
CopyRect
CreateIcon
DrawTextW
IsWindow
AlignRects
GetMenu
gdi32
RestoreDC
DeleteDC
ExcludeClipRect
BeginPath
AddFontResourceExW
GetDCOrgEx
GetBrushOrgEx
GetBitmapBits
BitBlt
AddFontResourceA
CloseMetaFile
AddFontResourceW
GetPixel
ClearBitmapAttributes
GetPixel
SetTextColor
GetCurrentPositionEx
DeleteObject
ClearBrushAttributes
CreateSolidBrush
CopyMetaFileA
AddFontResourceExA
ExtTextOutA
ExtTextOutA
SetTextColor
GetBrushOrgEx
AddFontResourceTracking
CloseMetaFile
AddFontResourceExW
GetDCOrgEx
AddFontMemResourceEx
CancelDC
DeleteDC
DeleteObject
ClearBrushAttributes
AbortPath
CreateSolidBrush
CopyMetaFileA
GetBitmapBits
CloseFigure
ExcludeClipRect
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ