Static task
static1
Behavioral task
behavioral1
Sample
01e74eed5c192dfa8fad6f6e52dc9b21_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01e74eed5c192dfa8fad6f6e52dc9b21_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
01e74eed5c192dfa8fad6f6e52dc9b21_JaffaCakes118
-
Size
84KB
-
MD5
01e74eed5c192dfa8fad6f6e52dc9b21
-
SHA1
ef7d9ceeeedc7117e6cb3b0b0fdbc807001eeb55
-
SHA256
c514086269d46b6341d08179efc0352e119ab96909825788809c0613efbe5c47
-
SHA512
415089484562af62b5f69f0f500b911143f2aaa874e03698830f24d66764521277eb85fb4a35100ae728317a6d70994a7458b1f92ff94d0487cfb85dbabd9858
-
SSDEEP
1536:fMchiQSA+vN6c7dEqxK/OgPHl/pI1URcCpi+16:kY0A+vNh7dEqxK/Og/l/+1UR3z16
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01e74eed5c192dfa8fad6f6e52dc9b21_JaffaCakes118
Files
-
01e74eed5c192dfa8fad6f6e52dc9b21_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e033fbe461e0dd0bd030b47ed27a691
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
HeapFree
CloseHandle
GetDateFormatA
CloseHandle
lstrlenA
CloseHandle
FreeLibrary
CloseHandle
GetLocalTime
CloseHandle
GlobalFree
CloseHandle
GlobalAlloc
CloseHandle
lstrcpyA
CloseHandle
Sleep
CloseHandle
lstrcpynA
user32
DialogBoxParamA
DrawIcon
AlignRects
BlockInput
CopyIcon
GetFocus
CopyImage
LoadMenuA
GetWindowTextA
GetDlgItem
CreateIcon
GetMenu
DrawTextA
EndDialog
GetDC
GetCursor
DrawIconEx
CloseWindow
DialogBoxParamW
DrawTextW
GetWindowTextLengthA
InsertMenuA
AppendMenuA
CopyRect
AppendMenuW
CalcMenuBar
IsWindow
LoadCursorA
IsMenu
CalcMenuBar
IsMenu
CreateIcon
DialogBoxParamW
DialogBoxParamA
InsertMenuA
CloseWindow
AlignRects
GetDlgItem
IsWindow
DrawTextW
CopyRect
GetCursor
DrawIconEx
EndDialog
GetWindowTextLengthA
CopyIcon
BlockInput
GetFocus
GetMenu
LoadMenuA
CopyImage
GetWindowTextA
AppendMenuW
DrawIcon
GetDC
AppendMenuA
LoadCursorA
DrawTextA
advapi32
RegEnumKeyW
RegEnumValueA
RegEnumKeyExW
RegOpenKeyExA
RegQueryValueExA
RegEnumValueW
RegDeleteValueW
RegFlushKey
RegOpenKeyExW
RegCreateKeyExA
RegDeleteKeyA
RegReplaceKeyW
RegOpenKeyW
RegQueryValueExW
RegOpenKeyA
RegQueryValueW
RegReplaceKeyA
RegQueryValueA
RegLoadKeyA
RegDeleteValueA
RegQueryInfoKeyA
RegLoadKeyW
RegQueryInfoKeyW
RegDeleteKeyW
RegGetKeySecurity
RegCreateKeyExW
RegCreateKeyW
RegEnumKeyExA
RegEnumKeyA
RegEnumKeyW
RegOpenKeyA
RegOpenKeyExW
RegQueryInfoKeyW
RegGetKeySecurity
RegDeleteKeyA
RegOpenKeyW
RegEnumKeyExA
RegCreateKeyExA
RegLoadKeyW
RegQueryValueExA
RegQueryValueA
RegEnumValueA
RegEnumValueW
RegLoadKeyA
RegOpenKeyExA
RegQueryValueW
RegDeleteValueW
RegEnumKeyA
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
RegReplaceKeyW
RegReplaceKeyA
RegQueryInfoKeyA
RegDeleteValueA
RegFlushKey
RegCreateKeyExW
RegCreateKeyW
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rddda Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eaata Size: 7KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.redoc Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.iaada Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ