Static task
static1
Behavioral task
behavioral1
Sample
d18afa4c16bafffe1417c84525e18eef_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d18afa4c16bafffe1417c84525e18eef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d18afa4c16bafffe1417c84525e18eef_JaffaCakes118
-
Size
89KB
-
MD5
d18afa4c16bafffe1417c84525e18eef
-
SHA1
2d05d932562912650254c297fe8a01f64f9680cb
-
SHA256
287d48e48d0aca8e15cc3a3d7079c2446d3c8fdbc07856df180ba8efd5e6e53e
-
SHA512
54875cc02018c65a1de5efa3f768e73c90e585e1fc1affc02db727d3a1d6159c8897de63fddd142fa8c96b840671284e41b31b9a2656be7561886b6510cc350c
-
SSDEEP
1536:vuBX2NQZ5TgB5akZvT/trhGpkapTpEDYYkJWpCtydd4G:vcXiQZ5nkZvTFVGprVUYYcybp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d18afa4c16bafffe1417c84525e18eef_JaffaCakes118
Files
-
d18afa4c16bafffe1417c84525e18eef_JaffaCakes118.exe windows:4 windows x86 arch:x86
406fd58f4fb84ffca683d10e7ed2fbc0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryInfoKeyW
RegQueryValueExW
RegEnumKeyW
RegCreateKeyExW
RegReplaceKeyA
RegQueryValueExA
RegEnumKeyExA
RegCreateKeyW
RegLoadKeyA
RegFlushKey
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExA
RegOpenKeyExW
RegDeleteKeyW
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyW
user32
DrawIcon
GetMenu
AlignRects
EndDialog
CreateIcon
LoadMenuA
IsWindow
CopyIcon
BlockInput
DialogBoxParamW
AppendMenuW
CopyRect
CloseWindow
IsMenu
CopyImage
InsertMenuA
DrawTextW
GetDlgItem
GetWindowTextLengthA
kernel32
GetFileSize
Sleep
lstrcmpA
WideCharToMultiByte
GetFileAttributesA
CloseHandle
GetModuleFileNameA
GetDateFormatA
GetLastError
GetLocalTime
GetCommandLineA
lstrcmpiA
GetFileType
HeapAlloc
SetLastError
lstrlenA
lstrcatA
comctl32
ImageList_Merge
ImageList_Remove
ImageList_Copy
InitCommonControls
ImageList_GetImageRect
ImageList_ReplaceIcon
ImageList_LoadImage
ImageList_LoadImageA
ImageList_Destroy
ImageList_GetImageCount
ImageList_DragLeave
ImageList_DragEnter
ImageList_GetDragImage
ImageList_EndDrag
ImageList_Replace
ImageList_GetImageInfo
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 7KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.res Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ