Static task
static1
Behavioral task
behavioral1
Sample
004a4687d5c46818491f48910fe7cc8c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
004a4687d5c46818491f48910fe7cc8c_JaffaCakes118
-
Size
82KB
-
MD5
004a4687d5c46818491f48910fe7cc8c
-
SHA1
d403fc115079439f81b4038bf7bdc48eb342b758
-
SHA256
cf1dc077b6fe49dfad34acc653b1f9623dba098088d3b4f3451790223911a785
-
SHA512
2a8907740aab8d811d38e15a6b87393471509629b9863406597bb8f07e79d552476b4ce49dfaccee4988d0175017f9e4fae0f387df3bf5f960abbaf26d80be6e
-
SSDEEP
1536:9lRYOuvOM8rnYE896CU6kjSO65SgD+BLgzkS9:bKOOCrc73tXzkS9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 004a4687d5c46818491f48910fe7cc8c_JaffaCakes118
Files
-
004a4687d5c46818491f48910fe7cc8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
db3da6d4d5de8938b5236b111df10e52
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetLastError
CloseHandle
HeapFree
CloseHandle
GetModuleHandleA
CloseHandle
GetLastError
CloseHandle
lstrcmpiA
CloseHandle
lstrcpyA
CloseHandle
GetCPInfo
CloseHandle
DeleteFileA
CloseHandle
lstrlenA
user32
DrawTextW
LoadCursorA
DrawIcon
AppendMenuW
CopyRect
LoadMenuA
GetWindowTextA
DrawIconEx
BlockInput
IsWindow
CopyIcon
CalcMenuBar
GetWindowTextLengthA
InsertMenuA
DialogBoxParamW
DialogBoxParamA
GetMenu
DrawTextA
AppendMenuA
IsMenu
CreateIcon
GetCursor
GetDC
EndDialog
GetDlgItem
AlignRects
CopyImage
CloseWindow
GetFocus
advapi32
RegEnumKeyW
RegDeleteKeyA
RegQueryValueExA
RegEnumKeyA
RegQueryInfoKeyW
RegDeleteValueA
RegDeleteKeyW
RegQueryValueExW
RegGetKeySecurity
RegLoadKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegFlushKey
RegEnumValueW
RegOpenKeyExW
RegCreateKeyExA
RegDeleteValueW
RegQueryValueW
RegReplaceKeyA
RegReplaceKeyW
RegCreateKeyW
RegLoadKeyW
RegOpenKeyW
RegCreateKeyExW
RegOpenKeyExA
RegEnumKeyExW
RegEnumValueA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA
RegEnumKeyExW
RegQueryValueExA
RegEnumKeyA
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExA
RegEnumValueW
RegReplaceKeyW
RegQueryValueA
RegDeleteKeyW
RegOpenKeyExA
RegLoadKeyA
RegDeleteKeyA
RegQueryValueW
RegOpenKeyA
RegQueryInfoKeyA
RegQueryInfoKeyW
RegCreateKeyExW
RegCreateKeyW
RegGetKeySecurity
RegFlushKey
RegReplaceKeyA
RegEnumValueA
RegEnumKeyW
RegDeleteValueW
RegLoadKeyW
RegEnumKeyExA
RegOpenKeyW
Sections
.taat Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdada Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eddta Size: 4KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relac Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 678B
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ