Static task
static1
Behavioral task
behavioral1
Sample
01fbaf2f5afefc6632d65c5e02e99ebe_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
01fbaf2f5afefc6632d65c5e02e99ebe_JaffaCakes118
-
Size
83KB
-
MD5
01fbaf2f5afefc6632d65c5e02e99ebe
-
SHA1
49bc80561d437e821f971bef748d19d41335aaa8
-
SHA256
7b6f3ca2485c36de6c8f6bcf6520e30ba8ea7b51ff2d3a75202ef225632a45ce
-
SHA512
95e6b2ac110f803826f02edcc48b7791c1da523a95d3668127be9c69a917ce952d528fd72b02776668b15099944651758611a88b836876a07f55b1a704f2eef9
-
SSDEEP
1536:/5YJqifCfK+7vYCyOM/9DZDldhsHyUlpT:/5qq3fFvnM/9DV0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01fbaf2f5afefc6632d65c5e02e99ebe_JaffaCakes118
Files
-
01fbaf2f5afefc6632d65c5e02e99ebe_JaffaCakes118.exe windows:4 windows x86 arch:x86
e8addefd1cb8dfa7e0658fee5e66846b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
CloseWindow
DrawTextA
LoadMenuA
CopyImage
CalcMenuBar
IsMenu
GetDlgItem
DrawIconEx
EndDialog
AlignRects
DrawIcon
GetCursor
GetWindowTextA
CopyRect
GetMenu
DrawTextW
kernel32
lstrcatA
GlobalAlloc
CloseHandle
HeapFree
GetFileAttributesA
lstrcmpiA
lstrcmpA
GetFileSize
WideCharToMultiByte
lstrcpynA
lstrlenA
GetDateFormatA
GetModuleHandleA
DeleteFileA
GetFileType
GetStdHandle
comctl32
ImageList_DragShowNolock
ImageList_Replace
ImageList_DrawEx
ImageList_Destroy
ImageList_GetImageInfo
ImageList_DragLeave
InitCommonControls
ImageList_Remove
ImageList_Create
ImageList_GetImageRect
ImageList_Copy
ImageList_GetImageCount
ImageList_Merge
ImageList_AddIcon
ImageList_LoadImageW
ImageList_DrawIndirect
ImageList_Draw
ImageList_Read
advapi32
RegEnumKeyW
RegEnumKeyExW
RegReplaceKeyA
RegQueryInfoKeyA
RegOpenKeyW
RegGetKeySecurity
RegFlushKey
RegEnumValueA
RegDeleteValueA
RegOpenKeyExW
RegReplaceKeyW
RegOpenKeyA
RegLoadKeyW
RegQueryInfoKeyW
RegLoadKeyA
RegEnumValueW
RegQueryValueExA
RegQueryValueExW
RegCreateKeyExA
RegDeleteKeyW
Sections
.uyDaUB Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mywJY Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clRZ Size: 7KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.YHRf Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ