Static task
static1
Behavioral task
behavioral1
Sample
d9ce56f6b320632edc180546e5db557c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d9ce56f6b320632edc180546e5db557c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9ce56f6b320632edc180546e5db557c_JaffaCakes118
-
Size
102KB
-
MD5
d9ce56f6b320632edc180546e5db557c
-
SHA1
84652149468d29d5a8b87ad964458d57fcf6d4f7
-
SHA256
5dfb08ec290562ff58c6997ec41482b6fe96c07c93e8469ff1bf4e8be5630d11
-
SHA512
fed6ed1f684ccb2d2b16c9bc64a7be44ba37df9e6d2b50bb33747b148e88bab72436d396d9393261627c8434ff0f8df42d59420b5079b0e32425536ede171be2
-
SSDEEP
1536:1o2bhmC12ER+WLubih7mSxckXbba/N2O4WdBTURDoq4OZZZLlCIiba:jbhZ1FVLc4xvXbyUadBYRD68wb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9ce56f6b320632edc180546e5db557c_JaffaCakes118
Files
-
d9ce56f6b320632edc180546e5db557c_JaffaCakes118.exe windows:4 windows x86 arch:x86
71ace84bb60cb36792a1369ed8388bd2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DragEnter
ImageList_Copy
CreateUpDownControl
ImageList_Create
DrawStatusTextW
CreateMappedBitmap
ImageList_Destroy
ImageList_AddIcon
DrawStatusText
ImageList_GetIcon
advapi32
RegQueryValueExA
RegSetValueA
RegOpenKeyExA
RegCreateKeyW
RegCreateKeyExW
RegQueryValueW
RegDeleteKeyA
RegOpenKeyW
RegEnumValueW
user32
GetCursor
CreateIcon
GetFocus
DialogBoxParamA
DrawIconEx
GetWindowTextA
DrawTextW
gdi32
DeleteObject
ExcludeClipRect
GetPixel
SetTextColor
CreateBrushIndirect
GetCurrentPositionEx
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ