Static task
static1
Behavioral task
behavioral1
Sample
d337c4ec1cb56deca6be64d44427a233_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d337c4ec1cb56deca6be64d44427a233_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d337c4ec1cb56deca6be64d44427a233_JaffaCakes118
-
Size
92KB
-
MD5
d337c4ec1cb56deca6be64d44427a233
-
SHA1
e37edca0573caca4b6c50df0890a1ab7163ccc2b
-
SHA256
a669ff083630f34eeb085dfda89a2f4e4d66fc0578c5cb71a809ebae336c9c46
-
SHA512
62a6e1fceb876ec7a3f6ac42a928e3c2728d00b3569f1a6c4d0ff3c0d9223a8817b8038e41358465d43652fe16041090448bcb2c4915b358001659e15fcebc4d
-
SSDEEP
1536:/Vpoc8hBuX56K8Q1ajVMftszeHtfkUgaezFlslS4XKJYq:tCc1X78rh2W6NFpkEg466
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d337c4ec1cb56deca6be64d44427a233_JaffaCakes118
Files
-
d337c4ec1cb56deca6be64d44427a233_JaffaCakes118.exe windows:4 windows x86 arch:x86
8eeeeb6ad3f69959e905c1f8c32c6005
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
CopyRect
LoadMenuA
CloseWindow
GetWindowTextA
GetDlgItem
GetCursor
CopyIcon
GetFocus
DrawIconEx
IsMenu
DrawTextA
EndDialog
GetMenu
DrawTextW
DialogBoxParamA
DrawIcon
GetFocus
DialogBoxParamW
CalcMenuBar
CopyImage
GetCursor
AppendMenuA
BlockInput
AlignRects
LoadCursorA
CloseWindow
GetWindowTextLengthA
IsWindow
DrawIcon
CopyIcon
CopyRect
DrawTextA
LoadMenuA
advapi32
RegEnumValueW
RegQueryInfoKeyA
RegDeleteKeyW
RegOpenKeyW
RegEnumValueA
RegFlushKey
RegEnumKeyW
RegCreateKeyExA
RegLoadKeyW
RegReplaceKeyW
RegOpenKeyExA
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW
RegGetKeySecurity
RegLoadKeyA
RegOpenKeyExW
RegDeleteValueA
RegEnumKeyExA
RegQueryValueA
kernel32
GetModuleFileNameA
FreeLibrary
GetFileSize
GetStringTypeW
GetDateFormatA
GetLastError
GlobalFree
GetStdHandle
DeleteFileA
lstrcatA
WideCharToMultiByte
GetCPInfo
GetCommandLineA
CloseHandle
lstrcpynA
SetLastError
HeapAlloc
comctl32
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_Destroy
ImageList_GetImageCount
ImageList_LoadImageW
ImageList_Create
ImageList_LoadImageA
ImageList_Read
ImageList_GetDragImage
ImageList_AddMasked
ImageList_GetImageRect
ImageList_EndDrag
ImageList_Remove
ImageList_LoadImage
ImageList_Draw
ImageList_Merge
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsr� Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ