Static task
static1
Behavioral task
behavioral1
Sample
bef9d3070f9b71f4c44feff2b2b6ef6b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bef9d3070f9b71f4c44feff2b2b6ef6b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bef9d3070f9b71f4c44feff2b2b6ef6b_JaffaCakes118
-
Size
59KB
-
MD5
bef9d3070f9b71f4c44feff2b2b6ef6b
-
SHA1
873c95b6060e334abc1457b98386bcdc05149929
-
SHA256
7753603dcc99a4a4b1d4ad2aa9fe36118de7dbae1b6e1ff2c2b695650073817b
-
SHA512
9a46147ed02d9006ce47cf34613df5d74363eea838cef0c49a6a64572ec99476761ed5cc6f8cea56a4756877a45722caa184aa867f91a2752c63a7248b1a3c6f
-
SSDEEP
1536:JFQR/8CtW8dPSpvtc6Xx39KOY3fxYcx+Tl7BSchZ:Rzbpvtc6Xx3kHulYch
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bef9d3070f9b71f4c44feff2b2b6ef6b_JaffaCakes118
Files
-
bef9d3070f9b71f4c44feff2b2b6ef6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
a2831bbe9c320bb890d7a51fc91d3484
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleA
FindFirstFileA
WriteFile
GetFileSize
OpenFileMappingA
GetFileTime
GetStdHandle
DeleteAtom
ReadFile
ExitThread
CreateDirectoryA
OpenFile
GlobalFree
GetCommandLineA
GetLastError
GetConsoleMode
DeleteFileW
GetCPInfo
Sleep
CreateProcessA
CreateThread
GetComputerNameA
CopyFileExA
gdi32
GetBrushOrgEx
ExcludeClipRect
DeleteObject
AddFontResourceExW
CancelDC
AddFontResourceW
AddFontResourceA
GetPixel
AddFontResourceTracking
CopyMetaFileA
GetClipBox
BitBlt
CloseFigure
ClearBitmapAttributes
SetTextColor
CloseFigure
BeginPath
AddFontMemResourceEx
GetPixel
SetTextColor
ExcludeClipRect
ExtTextOutA
AddFontResourceExA
GetCurrentPositionEx
GetPixel
BitBlt
GetClipBox
AddFontResourceA
ClearBrushAttributes
CreateSolidBrush
AddFontResourceTracking
CancelDC
CopyMetaFileA
DeleteObject
AddFontResourceW
AddFontResourceExW
ClearBitmapAttributes
GetDCOrgEx
GetBitmapBits
AddFontResourceW
AddFontResourceTracking
CloseFigure
ClearBrushAttributes
DeleteDC
DeleteObject
CopyMetaFileA
GetPixel
BitBlt
AbortPath
AddFontMemResourceEx
GetDCOrgEx
ExtTextOutA
GetClipBox
CreateSolidBrush
GetPixel
RestoreDC
AddFontResourceA
CloseMetaFile
AddFontResourceExA
SetTextColor
BeginPath
GetBrushOrgEx
comctl32
ImageList_DragEnter
ImageList_LoadImageA
ImageList_Copy
ImageList_DragLeave
ImageList_Create
InitCommonControls
ImageList_Replace
ImageList_Draw
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddIcon
ImageList_LoadImageW
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_GetImageInfo
ImageList_Destroy
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_Read
ImageList_GetIcon
user32
GetFocus
AlignRects
LoadMenuA
GetWindowTextA
AppendMenuA
IsMenu
LoadCursorA
DrawIcon
BlockInput
GetWindowTextLengthA
DialogBoxParamW
CalcMenuBar
GetCursor
DialogBoxParamA
EndDialog
CopyIcon
InsertMenuA
CopyRect
GetDC
BlockInput
AppendMenuW
IsWindow
CloseWindow
GetWindowTextA
GetFocus
CopyRect
EndDialog
CreateIcon
IsMenu
GetMenu
LoadMenuA
DrawIconEx
GetCursor
GetDlgItem
CalcMenuBar
CopyIcon
DialogBoxParamA
DrawTextA
DrawIcon
AlignRects
AppendMenuA
GetWindowTextLengthA
advapi32
RegReplaceKeyA
RegQueryInfoKeyA
RegQueryValueW
RegQueryValueExA
RegOpenKeyExW
RegEnumValueA
RegOpenKeyExA
RegQueryInfoKeyW
RegDeleteKeyA
RegEnumKeyExW
RegDeleteValueA
RegLoadKeyA
RegFlushKey
RegCreateKeyExA
RegCreateKeyW
RegReplaceKeyW
RegEnumValueW
RegDeleteKeyW
RegOpenKeyW
RegEnumKeyW
RegGetKeySecurity
RegEnumKeyA
RegEnumValueA
RegDeleteValueW
RegQueryValueExA
RegQueryInfoKeyA
RegCreateKeyExW
RegQueryValueW
RegOpenKeyExA
RegDeleteKeyW
RegCreateKeyExA
RegCreateKeyW
RegLoadKeyA
RegReplaceKeyA
RegLoadKeyW
RegEnumKeyA
RegDeleteValueA
RegReplaceKeyW
RegQueryValueExW
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ