Static task
static1
Behavioral task
behavioral1
Sample
06d5cfb78db4054c899e4ed59a5552f1_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
06d5cfb78db4054c899e4ed59a5552f1_JaffaCakes118
-
Size
84KB
-
MD5
06d5cfb78db4054c899e4ed59a5552f1
-
SHA1
0d38fccd4230a6233b537edd20dbb88984f99dfe
-
SHA256
19c331524121b3711ff40acf952aa513c55522c452d4fbd7cd416c8ca0c184e6
-
SHA512
f3c89efb95af2cddda727ac94465c571b0eabe9abe0064dcaabb5b14e67c88452244db88e88441b1f85af90c49c70743fe0f37550c81e379c8957ceeebc323f0
-
SSDEEP
1536:KPN96vI5hmQpsSrXxpFGsE74bv2ZRnE2f/Xx:/vI5hmFSTxOsNvEE2f/Xx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06d5cfb78db4054c899e4ed59a5552f1_JaffaCakes118
Files
-
06d5cfb78db4054c899e4ed59a5552f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
a0feffed2224c15cdc759092c2f9676e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamW
DrawTextA
DialogBoxParamA
LoadCursorA
AlignRects
AppendMenuW
CopyIcon
IsMenu
GetWindowTextA
CreateIcon
DrawTextW
AppendMenuA
EndDialog
IsWindow
DrawIconEx
GetDlgItem
GetFocus
BlockInput
CalcMenuBar
InsertMenuA
CopyRect
GetMenu
DrawIcon
CloseWindow
LoadMenuA
GetDC
GetWindowTextLengthA
GetCursor
CopyImage
EndDialog
CreateIcon
CopyRect
LoadMenuA
DrawTextW
DialogBoxParamW
BlockInput
IsMenu
GetCursor
LoadCursorA
DrawIcon
CalcMenuBar
GetDC
AppendMenuW
GetMenu
CopyImage
AlignRects
GetWindowTextA
CloseWindow
GetWindowTextLengthA
DrawTextA
DialogBoxParamA
DrawIconEx
InsertMenuA
AppendMenuA
GetFocus
CopyIcon
IsWindow
GetDlgItem
kernel32
CloseHandle
lstrcmpA
CloseHandle
GetCommandLineA
CloseHandle
GetModuleFileNameA
CloseHandle
GetLastError
CloseHandle
GetFileAttributesA
CloseHandle
lstrcatA
CloseHandle
ExitProcess
CloseHandle
GetFileType
CloseHandle
lstrlenA
CloseHandle
GetStdHandle
advapi32
RegDeleteValueW
RegQueryValueExA
RegQueryInfoKeyA
RegQueryValueW
RegCreateKeyExW
RegQueryValueExW
RegCreateKeyExA
RegReplaceKeyA
RegEnumKeyExA
RegOpenKeyA
RegGetKeySecurity
RegEnumKeyW
RegEnumKeyA
RegEnumKeyExW
RegCreateKeyW
RegEnumValueW
RegLoadKeyW
RegDeleteValueA
RegReplaceKeyW
RegDeleteKeyW
RegOpenKeyExW
RegFlushKey
RegOpenKeyW
RegQueryValueA
RegDeleteKeyA
RegOpenKeyExA
RegEnumValueA
RegLoadKeyA
RegQueryInfoKeyW
RegOpenKeyExA
RegDeleteKeyA
RegGetKeySecurity
RegLoadKeyW
RegDeleteValueW
RegCreateKeyW
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryValueExW
RegEnumValueA
RegOpenKeyExW
RegOpenKeyA
RegEnumKeyA
RegEnumKeyW
RegQueryValueA
RegCreateKeyExW
RegOpenKeyW
RegLoadKeyA
RegReplaceKeyW
RegReplaceKeyA
RegFlushKey
RegQueryInfoKeyW
RegQueryValueW
RegDeleteKeyW
RegDeleteValueA
RegEnumKeyExA
RegQueryValueExA
RegEnumKeyExW
RegEnumValueW
Sections
.tedt Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rddta Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 6KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iaada Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ