Static task
static1
Behavioral task
behavioral1
Sample
c122d034489afc9eccc3397a901574a1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c122d034489afc9eccc3397a901574a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c122d034489afc9eccc3397a901574a1_JaffaCakes118
-
Size
62KB
-
MD5
c122d034489afc9eccc3397a901574a1
-
SHA1
74e49ef7b6ac6a0e09ba1751982c465b0ea9c662
-
SHA256
fcfd020bb8f2679fb58ce67bed27f98377864319ff2cf67815a86c1ff0c1bb3e
-
SHA512
6439c91cea1a6a277705ec862efcac3abaeccc1f236ea66f6f64108bb03e03a5b01eef55827546f8e3a9f7e4912f0c653a5b88663565444beafd64a8eda8515e
-
SSDEEP
1536:ASZHHD3Y+1BPn+0MCy2NXGtnY7SSfmXb1Ra:AqHD3Y+f+PCy2N2tn6Sc8J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c122d034489afc9eccc3397a901574a1_JaffaCakes118
Files
-
c122d034489afc9eccc3397a901574a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
67de5f6c5aa595021f1284aa228b2c6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
FindAtomA
GetCPInfo
DeleteFileA
GlobalFree
CreateDirectoryA
DeleteFileW
CopyFileW
Sleep
GetConsoleMode
CopyFileA
GetFileSize
OpenFileMappingA
CreateThread
ReadConsoleA
SetLastError
CreateProcessA
FindFirstFileA
GetStdHandle
GetLastError
ReadFile
comctl32
ImageList_Create
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_LoadImage
ImageList_DragMove
ImageList_GetIconSize
ImageList_Copy
ImageList_LoadImageW
ImageList_AddIcon
ImageList_GetDragImage
ImageList_GetImageCount
ImageList_GetIcon
ImageList_DragShowNolock
InitCommonControls
ImageList_Merge
ImageList_Replace
ImageList_DragEnter
ImageList_Read
ImageList_ReplaceIcon
ImageList_EndDrag
ImageList_Destroy
ImageList_Draw
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_Replace
ImageList_BeginDrag
ImageList_DrawEx
ImageList_Destroy
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_Read
ImageList_Draw
ImageList_Remove
ImageList_AddIcon
ImageList_EndDrag
ImageList_AddMasked
ImageList_GetImageRect
ImageList_Create
InitCommonControls
ImageList_Merge
ImageList_DragLeave
ImageList_LoadImage
ImageList_GetIconSize
ImageList_Copy
ImageList_DrawEx
ImageList_LoadImage
ImageList_Remove
ImageList_DragMove
ImageList_Draw
ImageList_AddMasked
ImageList_Create
ImageList_GetImageCount
ImageList_Copy
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DrawIndirect
ImageList_GetDragImage
ImageList_EndDrag
ImageList_Read
ImageList_GetImageInfo
ImageList_DragLeave
ImageList_GetImageRect
ImageList_LoadImageA
ImageList_GetIconSize
ImageList_Destroy
ImageList_LoadImageW
ImageList_Merge
ImageList_AddIcon
gdi32
BitBlt
ExcludeClipRect
AddFontResourceW
SetTextColor
CopyMetaFileA
AddFontResourceExA
GetPixel
DeleteDC
GetPixel
DeleteObject
GetCurrentPositionEx
CloseFigure
AddFontMemResourceEx
CloseMetaFile
AbortPath
CancelDC
AddFontResourceA
GetClipBox
RestoreDC
ExtTextOutA
GetDCOrgEx
BeginPath
CreateSolidBrush
BitBlt
CloseFigure
AddFontMemResourceEx
GetPixel
BeginPath
ExtTextOutA
CloseMetaFile
DeleteDC
AddFontResourceTracking
AbortPath
GetBitmapBits
ClearBrushAttributes
AddFontResourceExA
SetTextColor
ExcludeClipRect
AddFontResourceW
advapi32
RegFlushKey
RegCreateKeyExW
RegGetKeySecurity
RegQueryInfoKeyW
RegQueryValueA
RegDeleteKeyA
RegEnumValueA
RegLoadKeyW
RegQueryValueW
RegOpenKeyA
RegQueryInfoKeyA
RegOpenKeyW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyW
RegDeleteValueA
RegEnumValueW
RegEnumKeyExA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ