Static task
static1
Behavioral task
behavioral1
Sample
dbc7689e47099a1f702738eaf1bae670_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbc7689e47099a1f702738eaf1bae670_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbc7689e47099a1f702738eaf1bae670_JaffaCakes118
-
Size
80KB
-
MD5
dbc7689e47099a1f702738eaf1bae670
-
SHA1
fb6111a9c0c80c346d18adc32213104dc20733c9
-
SHA256
b5f737f229e0b28d395dadd2288f9506f103eb847b0008e3019ecf869f0fbe0a
-
SHA512
3a79a29d6f0982cfc2c03da229323784b4593e1f17a4e45099031ff83d7d6e22e85e4e34479164c89146bc97b72162b6f8aa2afeab80582e32a786fede37fdc2
-
SSDEEP
1536:ueTmbH6fpvvp+1OltmZdz4NRWmJcavkDltroHWG:ZTmbHypvBZlweW+cPRaHWG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbc7689e47099a1f702738eaf1bae670_JaffaCakes118
Files
-
dbc7689e47099a1f702738eaf1bae670_JaffaCakes118.exe windows:4 windows x86 arch:x86
71a5199632d2857f3cfd655f51a28e93
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InsertMenuA
DrawTextA
BlockInput
GetDC
DialogBoxParamW
CloseWindow
EndDialog
CreateIcon
GetFocus
CalcMenuBar
LoadCursorA
GetWindowTextA
GetCursor
CopyImage
GetWindowTextLengthA
IsMenu
CopyRect
DrawTextW
LoadMenuA
DialogBoxParamA
GetWindowTextLengthA
DrawIcon
LoadMenuA
GetFocus
EndDialog
LoadCursorA
IsWindow
AppendMenuA
DrawTextW
CopyImage
CreateIcon
CalcMenuBar
GetDC
AlignRects
GetWindowTextA
CalcMenuBar
CopyImage
DialogBoxParamW
IsWindow
LoadMenuA
DrawIconEx
DialogBoxParamA
CloseWindow
GetDC
AppendMenuA
GetDlgItem
GetCursor
InsertMenuA
EndDialog
DrawTextW
advapi32
RegEnumValueW
RegReplaceKeyA
RegEnumKeyW
RegReplaceKeyW
RegLoadKeyW
RegDeleteValueA
RegOpenKeyA
RegFlushKey
RegOpenKeyExW
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegCreateKeyExW
RegLoadKeyA
RegOpenKeyW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kcdata Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ