Static task
static1
Behavioral task
behavioral1
Sample
f00aa57672f4e492f1f46bc134707f9f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f00aa57672f4e492f1f46bc134707f9f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f00aa57672f4e492f1f46bc134707f9f_JaffaCakes118
-
Size
60KB
-
MD5
f00aa57672f4e492f1f46bc134707f9f
-
SHA1
b6f2939ed9dfe07880085b6a4a7974dad7a565fc
-
SHA256
d915b23d189545213518627ff5a9fa718430764474b2dfc43134b14f57324ccd
-
SHA512
81c8aea8f0a2d775fd67f4567c160d975518594bf40aada239929cb6074cf9703b58d7cde3044706384f70803d4d081e79be368300e2c173f0122256b80ba18b
-
SSDEEP
768:EO7h7O/9ta+6YGhVNZBmlRKsjKSR+AikGPeOuPfaiS8XSK5AWV0Sd5ZHr74DT:EehJVN3mlLKSR+AikSHG5SlsH26poT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f00aa57672f4e492f1f46bc134707f9f_JaffaCakes118
Files
-
f00aa57672f4e492f1f46bc134707f9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
75502519ce004cadccb4466fcf212247
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CalcMenuBar
DrawIconEx
CopyIcon
IsWindow
GetMenu
DrawTextW
GetWindowTextLengthA
CopyImage
DialogBoxParamA
LoadMenuA
CopyRect
AppendMenuA
LoadCursorA
BlockInput
DrawIcon
GetFocus
AppendMenuW
GetCursor
GetDlgItem
EndDialog
DrawTextA
GetWindowTextA
AlignRects
advapi32
RegEnumKeyA
RegQueryValueExW
RegCreateKeyW
RegEnumKeyW
RegEnumKeyExA
RegFlushKey
RegDeleteValueW
RegGetKeySecurity
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyA
RegDeleteKeyA
RegLoadKeyA
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExA
RegQueryInfoKeyW
RegEnumKeyA
RegCreateKeyExA
RegFlushKey
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExW
RegEnumKeyExW
RegCreateKeyExW
RegQueryValueA
RegOpenKeyW
RegCreateKeyW
RegDeleteKeyA
RegEnumKeyW
RegGetKeySecurity
RegDeleteValueW
comctl32
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_DragEnter
ImageList_BeginDrag
ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_Remove
ImageList_LoadImage
InitCommonControls
ImageList_Merge
ImageList_Create
ImageList_GetDragImage
ImageList_DrawEx
ImageList_EndDrag
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_GetImageCount
ImageList_AddMasked
ImageList_DragEnter
ImageList_Merge
ImageList_LoadImageW
ImageList_GetImageInfo
ImageList_GetImageRect
ImageList_Replace
ImageList_Create
ImageList_Copy
ImageList_DrawEx
ImageList_Draw
ImageList_GetImageCount
ImageList_BeginDrag
InitCommonControls
ImageList_GetIconSize
ImageList_DragLeave
ImageList_GetIcon
ImageList_Destroy
ImageList_LoadImage
ImageList_Read
ImageList_EndDrag
ImageList_Draw
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_LoadImageA
ImageList_GetDragImage
ImageList_DragEnter
ImageList_AddMasked
ImageList_Copy
ImageList_GetImageRect
ImageList_LoadImageW
ImageList_AddIcon
ImageList_Remove
InitCommonControls
kernel32
GetCommandLineA
GetFileTime
GetFileSize
CreateDirectoryA
FindAtomA
CopyFileA
ExitThread
CopyFileExW
OpenFileMappingA
Sleep
GetCPInfo
DeleteFileA
CreateProcessA
ReadFile
CopyFileW
GetConsoleMode
CopyFileExA
FindFirstFileA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ