Static task
static1
Behavioral task
behavioral1
Sample
0bd53a75c99d7a5d18ec98df4106293b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
0bd53a75c99d7a5d18ec98df4106293b_JaffaCakes118
-
Size
136KB
-
MD5
0bd53a75c99d7a5d18ec98df4106293b
-
SHA1
aa0747ed5a9965f178b9834c8fc804855862a2f8
-
SHA256
d9ec9a5ed16c6ba72a4058428c0bafd85575631b7128a8677c220b1477403b85
-
SHA512
af45b757cd343d68da0f344e98e1c4c9b1c39b93d5b3165c3f19e3746f954e73d44035dd5df99e375f87355b1328872f287651da6e582f78bf13664ac404b834
-
SSDEEP
3072:OfTVmzcYta5YMqua/QmOdBSg6DhhtZp2cjsZqaz+0:SVDOMquxdjQhhIutaz+0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bd53a75c99d7a5d18ec98df4106293b_JaffaCakes118
Files
-
0bd53a75c99d7a5d18ec98df4106293b_JaffaCakes118.exe windows:4 windows x86 arch:x86
5bca318edc9e21c6767154945b13a542
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindow
DialogBoxParamW
GetCursor
GetWindowTextA
AppendMenuA
GetDlgItem
DrawIconEx
EndDialog
CopyIcon
GetFocus
InsertMenuA
CalcMenuBar
CopyImage
GetWindowTextLengthA
BlockInput
IsMenu
CloseWindow
GetDC
DrawIcon
DialogBoxParamA
CreateIcon
LoadCursorA
AppendMenuW
AlignRects
DrawTextW
DrawTextA
GetMenu
CopyRect
LoadMenuA
CalcMenuBar
DrawTextA
DialogBoxParamA
GetCursor
CopyImage
LoadMenuA
GetDlgItem
GetFocus
IsMenu
CopyIcon
InsertMenuA
CopyRect
CloseWindow
GetDC
AppendMenuA
AppendMenuW
CreateIcon
GetWindowTextLengthA
BlockInput
DrawIconEx
EndDialog
AlignRects
GetWindowTextA
IsWindow
DrawTextW
GetMenu
DrawIcon
LoadCursorA
DialogBoxParamW
kernel32
CloseHandle
GetCommandLineA
CloseHandle
GetFileType
CloseHandle
GlobalAlloc
CloseHandle
GetCPInfo
CloseHandle
GetLastError
CloseHandle
GetDateFormatA
CloseHandle
lstrcatA
CloseHandle
GetLastError
CloseHandle
GlobalFree
advapi32
RegOpenKeyExW
RegCreateKeyExA
RegEnumKeyExA
RegEnumKeyA
RegOpenKeyExA
RegDeleteValueW
RegEnumKeyExW
RegEnumValueA
RegCreateKeyExW
RegGetKeySecurity
RegQueryInfoKeyA
RegQueryValueExA
RegReplaceKeyA
RegQueryValueExW
RegOpenKeyW
RegOpenKeyA
RegDeleteKeyW
RegReplaceKeyW
RegDeleteKeyA
RegEnumValueW
RegFlushKey
RegEnumKeyW
RegQueryValueA
RegDeleteValueA
RegQueryInfoKeyW
RegLoadKeyA
RegCreateKeyW
RegLoadKeyW
RegQueryValueW
RegEnumKeyA
RegQueryValueExW
RegLoadKeyW
RegDeleteValueW
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegReplaceKeyA
RegEnumKeyExW
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyW
RegQueryInfoKeyA
RegCreateKeyExW
RegLoadKeyA
RegQueryValueA
RegOpenKeyW
RegEnumKeyExA
RegReplaceKeyW
RegQueryValueW
RegEnumKeyW
RegFlushKey
RegGetKeySecurity
RegQueryInfoKeyW
RegEnumValueW
RegDeleteKeyW
RegQueryValueExA
RegEnumValueA
RegOpenKeyExW
Sections
.tedt Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdada Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bas Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
.rarc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ