Static task
static1
Behavioral task
behavioral1
Sample
efbcebc53063fdff81723c894978626b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efbcebc53063fdff81723c894978626b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efbcebc53063fdff81723c894978626b_JaffaCakes118
-
Size
37KB
-
MD5
efbcebc53063fdff81723c894978626b
-
SHA1
c7705862fcf53956df383e44433e9812b430e26e
-
SHA256
c2633d4d30421a568ebbd5d9694c3c7b443517d7cc3ddd969f9c6373c79034b5
-
SHA512
651cd4a98e5a28258d6b1afe5b531074692534cde3ca99fbe1fd6340cbdf1f5fec57618c859c43cff9697db1947cd378c4ece0d2378a8e618305992a86673ff8
-
SSDEEP
768:gJlGhPhX6/BKQJJO9NmCUq8vmCNn05DFPOQg+/2:gJlpTJaNa7mY0LPOQgD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efbcebc53063fdff81723c894978626b_JaffaCakes118
Files
-
efbcebc53063fdff81723c894978626b_JaffaCakes118.exe windows:4 windows x86 arch:x86
b42aeea50189c77619f6a274fe346e65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyA
RegCreateKeyExW
RegEnumKeyW
RegQueryInfoKeyA
RegEnumValueA
RegEnumValueW
RegCreateKeyW
RegOpenKeyW
RegQueryValueExW
RegQueryValueA
RegDeleteValueW
RegQueryInfoKeyW
RegGetKeySecurity
RegDeleteKeyW
RegLoadKeyA
RegLoadKeyW
RegDeleteValueA
RegQueryValueExA
RegQueryInfoKeyA
RegReplaceKeyA
RegCreateKeyExA
RegCreateKeyExW
RegCreateKeyW
RegLoadKeyW
RegEnumKeyExA
RegOpenKeyW
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegQueryValueExW
RegQueryValueW
RegOpenKeyExW
comctl32
ImageList_DrawIndirect
ImageList_GetIcon
ImageList_DragLeave
ImageList_Draw
ImageList_GetDragImage
ImageList_ReplaceIcon
ImageList_EndDrag
ImageList_LoadImageW
ImageList_Destroy
ImageList_GetIconSize
ImageList_Read
ImageList_Replace
ImageList_DragEnter
ImageList_BeginDrag
ImageList_DragShowNolock
ImageList_LoadImageA
InitCommonControls
ImageList_EndDrag
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_Replace
ImageList_Copy
ImageList_GetImageRect
ImageList_DragEnter
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Merge
ImageList_ReplaceIcon
ImageList_DragMove
ImageList_Remove
ImageList_DrawIndirect
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Copy
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_Draw
ImageList_DragLeave
InitCommonControls
ImageList_LoadImageW
ImageList_Merge
ImageList_DrawEx
ImageList_Remove
ImageList_DragMove
ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_LoadImage
ImageList_EndDrag
ImageList_GetImageRect
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_LoadImageW
ImageList_DrawEx
ImageList_Merge
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_GetImageRect
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Destroy
ImageList_GetIconSize
ImageList_LoadImage
ImageList_BeginDrag
ImageList_DrawIndirect
ImageList_Remove
ImageList_DragMove
ImageList_DragLeave
ImageList_EndDrag
ImageList_LoadImageA
ImageList_AddIcon
ImageList_Replace
ImageList_GetDragImage
ImageList_Create
kernel32
SetLastError
GetLastError
OpenFileMappingA
ExitThread
CreateThread
CopyFileExW
FindFirstFileA
GetFileSize
OpenFile
CopyFileExA
GlobalFree
ReadFile
WriteFile
CopyFileA
GetStdHandle
GetFileTime
Sleep
DeleteFileA
CopyFileW
DeleteFileW
GetCommandLineA
gdi32
CloseFigure
DeleteDC
GetCurrentPositionEx
SetTextColor
GetBitmapBits
GetDCOrgEx
CancelDC
AbortPath
AddFontResourceA
ExcludeClipRect
BeginPath
AddFontResourceExW
AddFontResourceExA
DeleteObject
CopyMetaFileA
GetPixel
BitBlt
CloseMetaFile
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: - Virtual size: 837B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data2 Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
.data3 Size: - Virtual size: 35B
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 50B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ