Static task
static1
Behavioral task
behavioral1
Sample
00b35811b53b4d2e87b58440a9628678_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00b35811b53b4d2e87b58440a9628678_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
00b35811b53b4d2e87b58440a9628678_JaffaCakes118
-
Size
93KB
-
MD5
00b35811b53b4d2e87b58440a9628678
-
SHA1
b0ae94e6caf036bf52c20ac5b62551a20701dcb8
-
SHA256
e067bfc12d2dcf23bae72c60c7a40ad2467473363a7c10334a87474843059577
-
SHA512
b45532e455ddcf9d2c389eb27dc4b2c5016d7d59887406f21ae0498cddfec7e6efbc7f7138af2fc1d2077abe2da845036f0b5b4df43abbdea1e594da03a62195
-
SSDEEP
1536:za1aqWd6P6EGWvzsxZBkNeE1vjviB+qjtNFf:za1aqWd6P1nzAZusE1WHjZf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00b35811b53b4d2e87b58440a9628678_JaffaCakes118
Files
-
00b35811b53b4d2e87b58440a9628678_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f8bc4e3f575c1113b6746acfbb79a55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_LoadImageA
ImageList_Create
ImageList_Remove
ImageList_DrawIndirect
ImageList_Copy
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_DragMove
ImageList_LoadImage
ImageList_Destroy
ImageList_LoadImageW
ImageList_Read
ImageList_Merge
ImageList_BeginDrag
ImageList_GetImageRect
ImageList_GetImageInfo
ImageList_DrawEx
kernel32
lstrcpyA
GetCPInfo
lstrlenA
HeapFree
Sleep
GetFileSize
GetLocalTime
GetFileAttributesA
GetStringTypeA
CloseHandle
GetLastError
GetModuleHandleA
DeleteFileA
GetDateFormatA
lstrcpynA
GetStdHandle
user32
CloseWindow
CreateIcon
AppendMenuA
IsMenu
DrawIconEx
DrawTextA
GetWindowTextA
AppendMenuW
EndDialog
CopyImage
IsWindow
GetDC
LoadCursorA
DrawTextW
DialogBoxParamA
GetMenu
InsertMenuA
DrawIcon
advapi32
RegCreateKeyExW
RegEnumKeyW
RegReplaceKeyA
RegLoadKeyA
RegOpenKeyExA
RegLoadKeyW
RegEnumValueW
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegQueryValueA
RegFlushKey
RegOpenKeyExW
RegCreateKeyW
RegEnumValueA
RegOpenKeyW
Sections
.CsMi Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gIltr Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kMcZR Size: 7KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XbqHD Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ