Static task
static1
Behavioral task
behavioral1
Sample
03ef6ce520039c218f00d3a01f85cc25_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
03ef6ce520039c218f00d3a01f85cc25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
03ef6ce520039c218f00d3a01f85cc25_JaffaCakes118
-
Size
148KB
-
MD5
03ef6ce520039c218f00d3a01f85cc25
-
SHA1
5f3801386fcdbb8ca99bb4801c4afb5b3fe84db0
-
SHA256
1a3193d363f0ae753aa2b01fa65deaac6d549b794839d9f912035f83b28366e5
-
SHA512
21dee7abd3ac607f84bf61ed05885e896622c3647759298d91bb0c534de22e5a30b236fe99f8c577e5cde210e3e9ee31cfdfc1a0067c9397b7b1126aa385a555
-
SSDEEP
1536:eP2fgguXTcpUICJ87AHZwIFANSlMyFshXf7ggbqjtpD89apCw/mHQiS0cHN:O2gciHJ8AxhGdbqHoQCZO0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03ef6ce520039c218f00d3a01f85cc25_JaffaCakes118
Files
-
03ef6ce520039c218f00d3a01f85cc25_JaffaCakes118.exe windows:4 windows x86 arch:x86
f2c035f138cff4edb2767e5b0fb74d61
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_AddIcon
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_Copy
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_EndDrag
ImageList_DragShowNolock
InitCommonControls
ImageList_LoadImage
ImageList_Read
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragMove
ImageList_Merge
ImageList_GetDragImage
advapi32
RegEnumKeyExW
RegCreateKeyExW
RegOpenKeyW
RegDeleteKeyA
RegFlushKey
RegOpenKeyExA
RegGetKeySecurity
RegReplaceKeyA
RegReplaceKeyW
RegDeleteKeyW
RegEnumValueA
RegEnumValueW
RegDeleteValueA
RegCreateKeyW
RegOpenKeyA
RegOpenKeyExW
RegQueryValueA
RegEnumKeyA
RegEnumKeyExA
RegLoadKeyW
RegLoadKeyA
RegQueryValueExW
RegQueryInfoKeyA
RegCreateKeyExA
RegCreateKeyExW
RegEnumValueA
RegQueryInfoKeyA
RegLoadKeyW
RegDeleteValueW
RegEnumKeyExW
RegReplaceKeyW
RegCreateKeyW
RegEnumKeyA
RegOpenKeyW
RegQueryValueExW
RegQueryValueA
RegQueryValueExA
RegReplaceKeyA
RegGetKeySecurity
RegQueryValueW
RegQueryInfoKeyW
RegFlushKey
RegOpenKeyExA
RegEnumValueA
RegDeleteValueW
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyA
RegLoadKeyA
RegEnumKeyW
RegQueryValueExW
RegQueryValueW
RegDeleteKeyW
RegOpenKeyExA
RegGetKeySecurity
RegQueryValueA
RegFlushKey
RegOpenKeyW
RegEnumKeyExW
RegReplaceKeyW
kernel32
FindFirstFileA
GetFileSize
Sleep
GetLastError
OpenFileMappingA
ReadConsoleA
CopyFileExW
GetComputerNameA
GlobalFree
GetFileTime
OpenFile
ReadFile
SetLastError
CopyFileW
GetStdHandle
OpenFileMappingA
OpenFile
FindAtomA
CopyFileW
GetLastError
FindFirstFileA
CopyFileA
DeleteAtom
GetConsoleMode
DeleteFileW
CreateThread
CopyFileExA
CreateDirectoryA
ReadConsoleA
WriteFile
SetLastError
GetComputerNameA
ReadFile
GlobalFree
GetFileTime
FindAtomA
GetCommandLineA
SetLastError
GetLastError
GetCPInfo
CreateDirectoryA
CopyFileExA
Sleep
GetConsoleMode
OpenFile
GetFileSize
WriteFile
GetFileTime
GlobalFree
DeleteFileW
DeleteFileA
Sections
.TEXt Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ReLOc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CODe Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DAta Size: 92KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bSs Size: 4KB - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rdata Size: 4KB - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RdaTa Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ