Static task
static1
Behavioral task
behavioral1
Sample
f65d5f97cc80aebec883c4f63d426ea8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f65d5f97cc80aebec883c4f63d426ea8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f65d5f97cc80aebec883c4f63d426ea8_JaffaCakes118
-
Size
104KB
-
MD5
f65d5f97cc80aebec883c4f63d426ea8
-
SHA1
5a42cd72e917d6dcbc695f07185e41c13401decd
-
SHA256
c30233aff4f1433f182a05c6d1cc89f01d0ffb22a32cb47dabe7732baf3c71e4
-
SHA512
7b248961159dbde125a568047f76ec0fb4c4cf0453fee7300d6a5eefb885d6843236ced95f0115a79872f67ce6e96f8cb51517f5115450525a7adca8235860c7
-
SSDEEP
1536:WDrGQ8FV3LUJE2Eg9EwhHp8f4HV2k9wJ54/9FefPYmsorkeC0HN6:WDCQ8LUJEVaL2Hk9wJ54vUPy5u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f65d5f97cc80aebec883c4f63d426ea8_JaffaCakes118
Files
-
f65d5f97cc80aebec883c4f63d426ea8_JaffaCakes118.exe windows:4 windows x86 arch:x86
807de9c0e156a2669c3d9efffe8bd460
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDCOrgEx
CreateSolidBrush
GetClipBox
GetBrushOrgEx
ClearBrushAttributes
CopyMetaFileA
GetCurrentPositionEx
GetPixel
AddFontResourceW
AddFontResourceExW
BeginPath
RestoreDC
user32
DrawIconEx
CloseWindow
InsertMenuA
GetMenu
CalcMenuBar
AlignRects
DrawTextW
CopyImage
DrawTextA
LoadMenuA
CopyRect
BlockInput
GetWindowTextA
IsWindow
GetWindowTextLengthA
AppendMenuA
advapi32
RegCreateKeyExA
RegEnumKeyExA
RegFlushKey
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegReplaceKeyW
RegEnumValueA
RegOpenKeyW
RegQueryValueW
RegDeleteValueA
RegLoadKeyA
RegEnumKeyA
RegOpenKeyExW
RegEnumKeyW
RegDeleteKeyW
RegQueryInfoKeyA
RegQueryValueA
RegDeleteValueW
RegQueryValueExA
RegCreateKeyExW
RegFlushKey
RegCreateKeyExA
RegDeleteValueA
RegReplaceKeyA
RegEnumKeyA
RegOpenKeyExA
RegEnumKeyExA
RegFlushKey
RegOpenKeyW
RegCreateKeyW
RegLoadKeyA
RegOpenKeyA
RegOpenKeyExW
RegEnumValueA
RegLoadKeyW
RegReplaceKeyA
RegQueryValueA
RegDeleteKeyW
RegDeleteValueA
RegDeleteValueW
RegCreateKeyExA
RegLoadKeyW
RegOpenKeyExA
RegReplaceKeyW
RegCreateKeyExA
RegCreateKeyExW
RegGetKeySecurity
RegEnumKeyA
RegEnumKeyExW
RegOpenKeyA
RegDeleteValueW
RegOpenKeyW
RegEnumKeyExA
RegFlushKey
RegEnumKeyW
RegLoadKeyA
RegDeleteValueA
RegDeleteKeyW
RegQueryValueA
comctl32
ImageList_Merge
ImageList_Destroy
ImageList_DrawEx
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Remove
ImageList_AddIcon
ImageList_Draw
ImageList_Read
ImageList_Replace
ImageList_ReplaceIcon
ImageList_GetDragImage
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_Copy
InitCommonControls
ImageList_GetImageCount
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_Read
ImageList_LoadImage
ImageList_DragLeave
ImageList_DrawIndirect
ImageList_GetIconSize
ImageList_BeginDrag
ImageList_Destroy
ImageList_EndDrag
ImageList_GetImageInfo
ImageList_Create
ImageList_AddIcon
ImageList_Remove
ImageList_DrawEx
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_GetDragImage
ImageList_Replace
ImageList_DragLeave
ImageList_Draw
ImageList_Remove
ImageList_Merge
ImageList_LoadImageW
ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_AddIcon
ImageList_GetIconSize
InitCommonControls
ImageList_Read
ImageList_Create
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ