Static task
static1
Behavioral task
behavioral1
Sample
0976b4b09bcd56f9a2c63070d8c7ac4b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0976b4b09bcd56f9a2c63070d8c7ac4b_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
0976b4b09bcd56f9a2c63070d8c7ac4b_JaffaCakes118
-
Size
1.2MB
-
MD5
0976b4b09bcd56f9a2c63070d8c7ac4b
-
SHA1
3e86f82bf43743e6c265481c61fdc6f939bc3386
-
SHA256
05da49e8e27d4c563b30869a5425f8f116c8cfc85b1b2741d564aca1056934c6
-
SHA512
77924da3048baaf945e2fa209ff533b14f7986d13b1f0e63fcce7e9e079d74712e49fe556f0f9d75ebf488eef8ff931710be96057afa270817066d0f9c43a8c0
-
SSDEEP
24576:c7FzuMI88uEcRuP6ubpPA/otGdp/Brqnp/fek:c4MI8LEcREiQip5Cb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0976b4b09bcd56f9a2c63070d8c7ac4b_JaffaCakes118
Files
-
0976b4b09bcd56f9a2c63070d8c7ac4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
59f8b1900d016cce28cfe3d6a3976253
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyExW
RegCreateKeyExA
RegLoadKeyW
RegQueryValueA
RegLoadKeyA
RegDeleteValueA
RegGetKeySecurity
RegQueryValueExW
RegOpenKeyW
RegDeleteKeyW
RegQueryValueExA
RegReplaceKeyW
RegDeleteValueW
RegEnumKeyW
RegQueryInfoKeyW
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueW
gdi32
GetClipBox
BitBlt
BeginPath
ExtTextOutA
DeleteDC
RestoreDC
GetBitmapBits
GetBrushOrgEx
AddFontResourceW
ExcludeClipRect
AddFontResourceTracking
GetPixel
AddFontResourceExW
SetTextColor
GetDCOrgEx
AddFontMemResourceEx
DeleteObject
AbortPath
CloseMetaFile
user32
CreateIcon
AppendMenuA
IsMenu
AppendMenuW
DrawIconEx
DrawTextW
GetFocus
DrawTextA
GetDlgItem
CopyRect
LoadCursorA
DrawIcon
GetDC
GetMenu
GetWindowTextLengthA
BlockInput
DialogBoxParamW
IsWindow
EndDialog
CloseWindow
InsertMenuA
kernel32
GetCPInfo
ReadConsoleA
GetCommandLineA
DeleteFileW
GlobalFree
CopyFileExW
CreateProcessA
ReadFile
DeleteAtom
Sleep
FindFirstFileA
CreateDirectoryA
GetComputerNameA
SetLastError
ExitThread
OpenFileMappingA
DeleteFileA
comctl32
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_DragLeave
ImageList_GetIcon
ImageList_DragEnter
ImageList_Merge
ImageList_DrawIndirect
ImageList_Remove
ImageList_Read
ImageList_DragMove
ImageList_Draw
ImageList_EndDrag
ImageList_ReplaceIcon
ImageList_LoadImage
ImageList_Create
InitCommonControls
ImageList_BeginDrag
ImageList_GetIconSize
ImageList_AddMasked
ImageList_Copy
ImageList_DrawEx
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ