Static task
static1
Behavioral task
behavioral1
Sample
c79b90357af089942133057eea31205e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c79b90357af089942133057eea31205e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c79b90357af089942133057eea31205e_JaffaCakes118
-
Size
72KB
-
MD5
c79b90357af089942133057eea31205e
-
SHA1
ae51698ae758a1cf4298d663b65b5ecbdb9fe195
-
SHA256
3273068899b195d59f47f3ca8cbffc5480ccb92595c8a8d653f66b8d6b1bc202
-
SHA512
90c5849f551000758b196463b87b708ddcb24b183f9068ab7633044432489608efd56d5cc69f031d99f4985c2957e3ff3c39bcf108999782277d63ff3f87556d
-
SSDEEP
1536:+fuFG5FE2GdqIwARmQ0HbA6pLe7Eq3CYrEgHftGCmCB5F7lh:+fSiE2GAJQ07A6JACYzFGy57lh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c79b90357af089942133057eea31205e_JaffaCakes118
Files
-
c79b90357af089942133057eea31205e_JaffaCakes118.exe windows:4 windows x86 arch:x86
4a01d7594be2e8e6cc47049a2367850e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ClearBitmapAttributes
CloseMetaFile
AddFontResourceExA
AddFontResourceTracking
DeleteObject
AddFontMemResourceEx
GetBrushOrgEx
CreateSolidBrush
AddFontResourceA
GetClipBox
ExtTextOutA
AbortPath
AddFontResourceW
GetCurrentPositionEx
AddFontResourceExW
GetPixel
CopyMetaFileA
SetTextColor
user32
GetWindowTextA
CopyRect
DrawTextA
CopyIcon
GetMenu
GetDC
DrawIcon
GetFocus
AppendMenuA
IsWindow
DrawIconEx
BlockInput
GetDlgItem
GetCursor
CloseWindow
AppendMenuW
GetWindowTextLengthA
DrawTextW
advapi32
RegEnumValueW
RegEnumValueA
RegReplaceKeyA
RegReplaceKeyW
RegFlushKey
RegCreateKeyExA
RegCreateKeyW
RegQueryValueW
RegQueryInfoKeyA
RegDeleteValueA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExW
RegEnumKeyW
RegGetKeySecurity
RegOpenKeyExA
RegEnumKeyExA
RegEnumKeyA
RegEnumKeyExW
kernel32
SetLastError
ReadConsoleA
CopyFileA
OpenFileMappingA
OpenFile
GetCPInfo
DeleteFileA
CopyFileW
GlobalFree
CopyFileExW
FindFirstFileA
GetConsoleMode
GetLastError
CreateThread
WriteFile
GetCommandLineA
FindAtomA
GetFileSize
CreateProcessA
comctl32
ImageList_Draw
ImageList_LoadImageW
InitCommonControls
ImageList_Copy
ImageList_EndDrag
ImageList_GetIcon
ImageList_DragShowNolock
ImageList_Destroy
ImageList_DrawEx
ImageList_Read
ImageList_Merge
ImageList_GetImageRect
ImageList_AddIcon
ImageList_DragEnter
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_DragLeave
ImageList_LoadImageA
ImageList_DrawIndirect
ImageList_GetImageInfo
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 755B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 323B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ