Static task
static1
Behavioral task
behavioral1
Sample
0bd22f0ebf67411955cbef7f320aca9a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0bd22f0ebf67411955cbef7f320aca9a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0bd22f0ebf67411955cbef7f320aca9a_JaffaCakes118
-
Size
141KB
-
MD5
0bd22f0ebf67411955cbef7f320aca9a
-
SHA1
b3e41447c61879438d7716766fef2e0b7e8f6b95
-
SHA256
6597f1ec3fe40607efd436be17696d783dafab689bd0eac4954a9eab3fe63ef5
-
SHA512
63fb86f0fd591fd77b3b3a33199d49d0bf850a0202820924abc8473ad4a928bab739eb822ba476a61f465fcc89525ab5f4584cf35b77d17f8172567f3ae55bd3
-
SSDEEP
1536:2GqSj0BNv1eDH4tfBuG669mvqtFyfcUUIlp+lHHZGF4xMvgec9Aj048cOTOA1Eom:uBJ1eT4V/7/tFyzUI6HkFsej04884Dm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bd22f0ebf67411955cbef7f320aca9a_JaffaCakes118
Files
-
0bd22f0ebf67411955cbef7f320aca9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
b4172612de0a3bb5d9397cade64109df
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenu
BlockInput
CopyImage
DrawIconEx
CopyRect
AppendMenuA
IsMenu
CalcMenuBar
GetDlgItem
CreateIcon
InsertMenuA
LoadCursorA
DrawIcon
GetWindowTextLengthA
GetDC
DrawTextW
GetFocus
DialogBoxParamA
kernel32
lstrcmpiA
ExitProcess
GetCommandLineA
WideCharToMultiByte
GlobalFree
GetOEMCP
GetCommandLineW
GetStringTypeA
GetLogicalDrives
HeapAlloc
GetCPInfo
GetFileAttributesA
GetLastError
GetFileType
GetLocalTime
GlobalAlloc
DeleteFileA
lstrcmpA
HeapFree
Sleep
GetLastError
FreeConsole
GetLocalTime
FreeConsole
HeapAlloc
FreeConsole
Sleep
FreeConsole
lstrcatA
FreeConsole
GetFileType
FreeConsole
GetModuleFileNameA
FreeConsole
GetStringTypeW
FreeConsole
WideCharToMultiByte
FreeConsole
ExitProcess
FreeConsole
lstrcmpA
GetFileType
GetFileSize
GetCommandLineW
GetOEMCP
FreeLibrary
lstrcpynA
lstrcpyA
lstrcatA
GlobalAlloc
GetCPInfo
HeapFree
lstrcmpiA
GetLocalTime
GlobalFree
ExitProcess
GetStringTypeW
GetLastError
GetLastError
GetModuleHandleA
HeapAlloc
advapi32
RegOpenKeyA
RegCreateKeyExW
RegReplaceKeyA
RegQueryValueA
RegEnumKeyA
RegQueryValueW
RegQueryValueExW
RegOpenKeyExA
RegEnumKeyExA
RegFlushKey
RegDeleteKeyW
RegOpenKeyExW
RegLoadKeyA
RegLoadKeyW
RegGetKeySecurity
RegDeleteValueW
Sections
.tdxt Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdada Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 3KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idada Size: 2KB - Virtual size: 474B
IMAGE_SCN_MEM_READ