Static task
static1
Behavioral task
behavioral1
Sample
b9db11189ade904b581af05f005cf84b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b9db11189ade904b581af05f005cf84b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9db11189ade904b581af05f005cf84b_JaffaCakes118
-
Size
104KB
-
MD5
b9db11189ade904b581af05f005cf84b
-
SHA1
9492b6ffc1666d27ee345c3e84f4ed00e5e149fe
-
SHA256
453b20f9b901742428890cf986f129397c81ef54bfd39287d8823c45e37d77b5
-
SHA512
291aec192db1d5395e417f79b345f58921d1e219986415303ca5565b75b926139165dff8cad087e978fbcb783912a83b5177e39b24d6df465cf21cdaa57c2eac
-
SSDEEP
3072:BQN/fHn++vvQcu1F6H8bObYAc6RmDPKK7DdqLy:OXHnoc6IHiObBYDyMUy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9db11189ade904b581af05f005cf84b_JaffaCakes118
Files
-
b9db11189ade904b581af05f005cf84b_JaffaCakes118.exe windows:4 windows x86 arch:x86
c4aedb1930d7db179e083f6b263c5018
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegLoadKeyW
RegReplaceKeyA
RegEnumKeyExW
RegFlushKey
RegOpenKeyW
RegQueryInfoKeyA
RegEnumKeyA
RegQueryValueExW
RegLoadKeyA
RegQueryValueA
RegOpenKeyExA
RegEnumKeyW
RegQueryValueExA
RegCreateKeyExW
RegQueryValueW
RegOpenKeyExW
RegReplaceKeyW
RegDeleteValueW
RegCreateKeyW
RegQueryValueExW
RegDeleteKeyW
RegQueryInfoKeyA
RegReplaceKeyA
RegEnumKeyA
RegEnumKeyExW
RegCreateKeyExA
RegQueryValueA
RegOpenKeyExA
RegDeleteValueA
RegQueryValueW
RegCreateKeyW
RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExW
RegDeleteValueW
RegLoadKeyA
RegQueryValueExA
RegEnumKeyA
RegCreateKeyExW
RegQueryValueW
RegDeleteKeyW
RegEnumValueA
RegOpenKeyW
RegGetKeySecurity
RegQueryValueExW
RegDeleteValueW
RegQueryInfoKeyA
RegLoadKeyW
RegReplaceKeyW
RegEnumKeyExA
RegEnumValueW
RegOpenKeyExA
RegReplaceKeyA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueA
RegEnumKeyW
comctl32
ImageList_Copy
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_Read
ImageList_LoadImage
ImageList_Remove
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_GetIconSize
ImageList_Destroy
ImageList_GetImageRect
ImageList_AddMasked
ImageList_Draw
ImageList_Create
ImageList_GetDragImage
ImageList_Merge
ImageList_GetIcon
ImageList_GetImageInfo
InitCommonControls
ImageList_BeginDrag
ImageList_DragMove
ImageList_DragLeave
ImageList_BeginDrag
ImageList_AddIcon
ImageList_Create
ImageList_LoadImage
ImageList_Read
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageRect
ImageList_GetDragImage
ImageList_Draw
ImageList_GetImageInfo
ImageList_DragLeave
InitCommonControls
ImageList_DragShowNolock
ImageList_Replace
ImageList_DrawIndirect
ImageList_Destroy
ImageList_Merge
ImageList_DrawEx
ImageList_AddIcon
ImageList_GetImageCount
ImageList_EndDrag
ImageList_AddMasked
ImageList_GetIcon
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_DragMove
ImageList_GetIconSize
ImageList_Read
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_Copy
ImageList_Create
ImageList_DrawEx
ImageList_Remove
InitCommonControls
ImageList_GetImageRect
ImageList_LoadImage
ImageList_Draw
kernel32
DeleteFileW
GetFileSize
CreateProcessA
WriteFile
CopyFileExA
SetLastError
GlobalFree
GetComputerNameA
GetStdHandle
OpenFile
CreateDirectoryA
CopyFileW
ExitThread
GetFileTime
FindAtomA
ReadFile
GetFileTime
ReadConsoleA
GetComputerNameA
OpenFileMappingA
CopyFileExW
CopyFileW
WriteFile
DeleteFileA
FindAtomA
Sleep
GetCommandLineA
CreateProcessA
GlobalFree
OpenFile
GetLastError
CopyFileA
CopyFileExA
ExitThread
GetConsoleMode
DeleteAtom
GetFileSize
CreateDirectoryA
FindFirstFileA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ