Static task
static1
Behavioral task
behavioral1
Sample
ba368e62d3789d50f65d83b7bef19656_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ba368e62d3789d50f65d83b7bef19656_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba368e62d3789d50f65d83b7bef19656_JaffaCakes118
-
Size
74KB
-
MD5
ba368e62d3789d50f65d83b7bef19656
-
SHA1
8532a65c82c0bca6898c87b3a2369f4996d8638a
-
SHA256
e92228635062514c1ac9a1f08205be9c7141c41516315a2180d0f1bd9acb4ec8
-
SHA512
d6f56b4a6a92197efa18a394c87a3649e193a8a44873857527e324ebc0a9b4167e0e97a764fceb3ba0938c9014d8e41e56bf1afa2159ac5efcff497a71542765
-
SSDEEP
1536:7bzWESVbZgKVXtxpozsWbG6EdX+E9jmprxjw/eRC:7bzYbKEXt7/WbG5R+zBw/j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba368e62d3789d50f65d83b7bef19656_JaffaCakes118
Files
-
ba368e62d3789d50f65d83b7bef19656_JaffaCakes118.exe windows:4 windows x86 arch:x86
6efa39a8a511bbe20b894f26a1e8165b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegEnumKeyExW
RegQueryValueA
RegDeleteKeyA
RegSetValueW
RegDeleteValueW
RegEnumKeyW
RegCreateKeyA
RegCreateKeyW
RegOpenKeyExA
RegEnumValueW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegQueryValueW
RegQueryValueExW
RegCreateKeyExA
RegEnumKeyExA
RegDeleteValueA
RegEnumValueA
RegCreateKeyExW
user32
GetCursor
DrawIconEx
LoadMenuA
LoadCursorA
GetDlgItem
DrawTextA
IsMenu
CopyImage
GetDC
DialogBoxParamW
DialogBoxParamA
CreateIcon
GetWindowTextLengthA
gdi32
CreateHalftonePalette
CreateFontIndirectA
GetPixel
CreateCompatibleDC
ExcludeClipRect
CreatePalette
DeleteObject
GetPixel
CreateBitmap
SetTextColor
GetCurrentPositionEx
DeleteDC
CreateDIBitmap
CreateSolidBrush
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 85KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 132B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ