Static task
static1
Behavioral task
behavioral1
Sample
07ff509bd47d2ca9e8ece89d33fbff41_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
07ff509bd47d2ca9e8ece89d33fbff41_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07ff509bd47d2ca9e8ece89d33fbff41_JaffaCakes118
-
Size
99KB
-
MD5
07ff509bd47d2ca9e8ece89d33fbff41
-
SHA1
76ff0addd3c53a1a7d503fd240e0a909f971e702
-
SHA256
ee3e981c5c9d47c397c5f9f34adf40862c436e33e22519bd40cfd1bfdcd1be1d
-
SHA512
be5a68b30b689787b02b816afe1a727a4a6426f7f24283df7d2e1c96fca56d4fcc561b6299558ae10796a58b5055ea0b28f0bdccbb72718d911adaf54d3bffc0
-
SSDEEP
1536:scHpvQIaE3vnfkst+2h9BMX81NWIH5tuKNoh+T3Gvxf2Cv/yw1uvfj7xfyJP:jpvn3vn1p/BWI2K6ET3A2CT1qX1yJP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07ff509bd47d2ca9e8ece89d33fbff41_JaffaCakes118
Files
-
07ff509bd47d2ca9e8ece89d33fbff41_JaffaCakes118.exe windows:4 windows x86 arch:x86
ff94f49719ae6c6a5dc371797123fe92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetCPInfo
WideCharToMultiByte
lstrlenA
GetDateFormatA
lstrcatA
GetCommandLineA
HeapAlloc
CloseHandle
GlobalAlloc
GetStringTypeW
HeapFree
Sleep
DeleteFileA
lstrcpynA
lstrcmpiA
GetFileType
lstrcmpA
GetLastError
lstrcpyA
user32
GetDC
DrawIconEx
AppendMenuA
CopyRect
GetCursor
CreateIcon
CopyImage
DrawTextA
CloseWindow
BlockInput
LoadMenuA
CopyIcon
AlignRects
DialogBoxParamW
DialogBoxParamA
IsMenu
InsertMenuA
GetMenu
GetDlgItem
AppendMenuW
advapi32
RegCreateKeyW
RegLoadKeyW
RegQueryValueExW
RegReplaceKeyW
RegLoadKeyA
RegOpenKeyW
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyA
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegCreateKeyExA
RegQueryInfoKeyW
RegFlushKey
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
comctl32
ImageList_Read
ImageList_Draw
InitCommonControls
ImageList_GetImageRect
ImageList_Remove
ImageList_DragMove
ImageList_Replace
ImageList_AddMasked
ImageList_LoadImage
ImageList_GetDragImage
ImageList_Create
ImageList_LoadImageA
ImageList_DragEnter
ImageList_GetIconSize
ImageList_DragLeave
ImageList_LoadImageW
ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_Merge
Sections
.sdqwE Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Vjcy Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ClcwN Size: 6KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RJdMjw Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ