Static task
static1
Behavioral task
behavioral1
Sample
d0b5c34a6a9545b1949a3d8b3fc81392_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d0b5c34a6a9545b1949a3d8b3fc81392_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0b5c34a6a9545b1949a3d8b3fc81392_JaffaCakes118
-
Size
33KB
-
MD5
d0b5c34a6a9545b1949a3d8b3fc81392
-
SHA1
8c12a4b2dd421e6a0c61b4b49c7b53059f54f6df
-
SHA256
9d05ef6c6114e2011229e995638489b47fe926aa3659e74a03963500b6ebd605
-
SHA512
2be4c2be11eebd466e2afe3225c0edba9747ac84b726a82b457a6d1bfb4d9525f5e11b093e6dfb5a7e576b3c1798fad28cd547d5a94001c8c176065abd139c9b
-
SSDEEP
384:akgtML9svX3DF5tf7cAdFjf5DBEERd7IgrRJ0BU16H85fV/MTxgLh4h7:Bg9nDFff7cgFjvEG7Io8BI6c1ygL6h7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0b5c34a6a9545b1949a3d8b3fc81392_JaffaCakes118
Files
-
d0b5c34a6a9545b1949a3d8b3fc81392_JaffaCakes118.exe windows:4 windows x86 arch:x86
e8f5a3c8bdfc68754b9fc5d2bec90a65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegDeleteValueW
RegLoadKeyW
RegDeleteValueA
RegEnumKeyW
RegCreateKeyW
RegOpenKeyA
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyExA
RegReplaceKeyA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegReplaceKeyW
RegDeleteKeyW
RegOpenKeyW
RegLoadKeyA
RegQueryValueW
RegEnumValueA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueW
RegLoadKeyW
RegQueryInfoKeyW
RegQueryValueW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExW
RegCreateKeyExA
RegEnumValueA
RegFlushKey
RegQueryValueExW
RegEnumKeyW
RegOpenKeyW
RegGetKeySecurity
RegReplaceKeyA
RegOpenKeyExA
RegLoadKeyA
RegCreateKeyW
RegEnumValueW
RegQueryValueExA
RegEnumKeyA
RegQueryValueExA
RegLoadKeyW
RegEnumValueW
RegOpenKeyExA
RegQueryInfoKeyW
RegQueryValueA
RegOpenKeyA
RegQueryInfoKeyA
RegGetKeySecurity
RegDeleteKeyA
RegEnumValueA
RegCreateKeyExA
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
kernel32
FindFirstFileA
GetCPInfo
CopyFileExW
CreateProcessA
GlobalFree
CopyFileExA
FindAtomA
CopyFileA
GetConsoleMode
ExitThread
CopyFileW
Sleep
GetCommandLineA
CreateDirectoryA
ReadConsoleA
GetComputerNameA
DeleteFileW
GetFileSize
SetLastError
GetStdHandle
WriteFile
OpenFile
OpenFile
GetLastError
CreateDirectoryA
DeleteFileW
CreateProcessA
GetComputerNameA
GetStdHandle
DeleteFileA
GlobalFree
GetCommandLineA
GetFileSize
GetCPInfo
CopyFileExW
CopyFileW
CreateThread
comctl32
ImageList_Create
ImageList_DrawIndirect
ImageList_DragMove
ImageList_Draw
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_GetIcon
ImageList_AddIcon
ImageList_GetImageCount
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_Merge
ImageList_DragShowNolock
ImageList_GetImageInfo
ImageList_DragLeave
ImageList_AddMasked
ImageList_DrawEx
ImageList_Remove
ImageList_EndDrag
ImageList_Read
ImageList_GetDragImage
ImageList_GetImageRect
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_Copy
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_DragMove
ImageList_DragLeave
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Replace
InitCommonControls
ImageList_Draw
ImageList_GetImageCount
gdi32
AddFontMemResourceEx
DeleteObject
AddFontResourceTracking
ClearBrushAttributes
ClearBitmapAttributes
AddFontResourceA
RestoreDC
BeginPath
SetTextColor
ExtTextOutA
GetClipBox
AddFontResourceExW
CloseFigure
GetDCOrgEx
GetCurrentPositionEx
AddFontResourceExA
GetPixel
CopyMetaFileA
AbortPath
GetBitmapBits
CloseMetaFile
CloseFigure
SetTextColor
CreateSolidBrush
GetBrushOrgEx
GetCurrentPositionEx
ExcludeClipRect
BitBlt
CopyMetaFileA
ClearBitmapAttributes
CancelDC
BeginPath
AddFontMemResourceEx
RestoreDC
AddFontResourceTracking
ClearBrushAttributes
AddFontResourceW
GetPixel
AddFontResourceExA
GetBitmapBits
GetPixel
AddFontResourceA
DeleteDC
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 954B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ