Static task
static1
Behavioral task
behavioral1
Sample
04fc0aa3c54cdafd44e1f34680c998ad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04fc0aa3c54cdafd44e1f34680c998ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
04fc0aa3c54cdafd44e1f34680c998ad_JaffaCakes118
-
Size
159KB
-
MD5
04fc0aa3c54cdafd44e1f34680c998ad
-
SHA1
74b5b1ed14a5f4920a12253a94871c563b2029e7
-
SHA256
e2771e8b89bc33b9de61d404222b93526dbf5ec64753e0f2cbc005063dde4530
-
SHA512
c440c5727d31d12d8a8c91e486a1d7b9e7227934395730ddc8616ddf57266825bf76307217f81e8144d3678e5e44d466e7ebb83bb4681f7aba6abc5f1aa07bda
-
SSDEEP
3072:u124sxgjgoJ0fiYN4t/Cga3Y0Vm9m6QKRwAOcPZZigTRlD:ws2TKfibNCgMY0Vm9m6ZHBFTzD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04fc0aa3c54cdafd44e1f34680c998ad_JaffaCakes118
Files
-
04fc0aa3c54cdafd44e1f34680c998ad_JaffaCakes118.exe windows:5 windows x86 arch:x86
2c33d88b6fabcd2f3f5a1cba9d850f1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CloseWindow
GetDC
DrawTextW
CreateIcon
AppendMenuW
GetFocus
LoadCursorA
BlockInput
BeginPaint
AlignRects
IsWindow
InsertMenuA
CalcMenuBar
DrawTextA
GetWindowTextA
DialogBoxParamW
CopyRect
IsMenu
DrawTextA
LoadCursorA
IsWindow
DrawTextW
GetDlgItem
GetCursor
GetWindowTextA
AppendMenuW
GetDC
GetFocus
GetMenu
DrawIcon
DialogBoxParamA
CalcMenuBar
LoadCursorA
IsMenu
DialogBoxParamW
CloseWindow
InsertMenuA
CalcMenuBar
CopyIcon
BeginPaint
DrawTextW
AppendMenuW
GetMenu
LoadMenuA
advapi32
RegLoadKeyW
RegEnumKeyExW
RegQueryValueExW
RegEnumKeyW
RegQueryValueA
RegCreateKeyExW
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA
RegOpenKeyExA
RegLoadKeyA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyW
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExW
RegQueryValueW
RegOpenKeyExW
RegReplaceKeyA
RegDeleteValueW
RegOpenKeyW
RegQueryInfoKeyW
RegReplaceKeyW
RegCreateKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueA
RegFlushKey
RegEnumKeyExA
RegQueryInfoKeyA
RegGetKeySecurity
RegReplaceKeyW
RegOpenKeyW
RegDeleteKeyA
RegEnumKeyW
RegCreateKeyExA
RegEnumValueA
RegEnumKeyExW
RegQueryValueExW
RegCreateKeyExA
RegCreateKeyExW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyA
RegCreateKeyW
RegReplaceKeyW
RegEnumValueA
RegQueryValueExW
RegReplaceKeyA
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueW
RegQueryValueA
kernel32
FlushFileBuffers
AddAtomA
FindAtomA
DeleteFileW
OpenFileMappingA
GetFileTime
GetStdHandle
GetFileType
CopyFileA
DeleteFileA
GlobalFree
ExitProcess
CreateDirectoryA
FindAtomW
GetCommandLineA
AddAtomW
GetLastError
ExitThread
DeleteAtom
CopyFileExW
CopyFileExA
GetCPInfo
GetPriorityClass
OpenFile
GetLocalTime
FindClose
FreeResource
FatalExit
AddAtomA
FlushFileBuffers
AddAtomW
GetFileType
DeleteAtom
DeleteFileW
ExitThread
FindClose
OpenFile
FatalExit
CopyFileExW
ExitProcess
GetStdHandle
FindAtomA
GetFileTime
GetLocalTime
GetCommandLineA
DeleteFileA
ExitThread
GetStdHandle
GetLocalTime
GetFileType
FatalExit
DeleteAtom
GetLastError
ReadFile
AddAtomW
OpenFileMappingA
ExitProcess
GlobalFree
CopyFileExW
AddAtomA
OpenFile
CreateDirectoryA
CopyFileA
CopyFileA
FlushFileBuffers
FreeResource
GetFileType
OpenFileMappingA
ExitProcess
GetCommandLineA
ReadFile
FindAtomW
CreateDirectoryA
AddAtomA
DeleteFileW
GlobalFree
GetLocalTime
CopyFileExA
GetPriorityClass
GetStdHandle
FatalExit
AddAtomW
FindClose
DeleteFileA
GetCPInfo
DeleteFileW
GetLocalTime
GlobalFree
FlushFileBuffers
FindAtomW
GetFileType
GetLastError
CopyFileExW
FreeResource
OpenFile
CreateDirectoryA
AddAtomW
DeleteFileA
WriteFile
ReadFile
GetCPInfo
FreeResource
DeleteAtom
GetLastError
FindClose
FlushFileBuffers
FatalExit
ExitProcess
CopyFileA
FindAtomA
CopyFileExA
AddAtomA
OpenFileMappingA
ExitThread
GetLocalTime
GetCPInfo
GetFileTime
GetFileType
OpenFile
GetStdHandle
ExitProcess
CopyFileA
FindAtomW
ReadFile
FlushFileBuffers
AddAtomA
OpenFileMappingA
DeleteFileW
FatalExit
ExitThread
Sections
.g8e4 Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.db6d4 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fh63 Size: 100KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.4123 Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.5f78f Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ