Static task
static1
Behavioral task
behavioral1
Sample
0e7b69f91e3d5761ceb45631ded0f036_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0e7b69f91e3d5761ceb45631ded0f036_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e7b69f91e3d5761ceb45631ded0f036_JaffaCakes118
-
Size
154KB
-
MD5
0e7b69f91e3d5761ceb45631ded0f036
-
SHA1
3961f41132246a8fe0fa64ec0cbe9b36b2b25e72
-
SHA256
c9e5340b6978e3ecbe6b58222f11a6fdd536fc6bc088728463481e4af2722fe4
-
SHA512
a94344829475ad4b5c2320bcd928fbd35294b1cd43859be64db1073198988bfd48a342fea7209eb4673c6aa02c385ddf9f59e3c4af5007253256dca3280bdb9a
-
SSDEEP
3072:9GY4G4ZJxXU/3ykg+istYF4ePKea/lr1Os5x+rXAIjVsA0+Lg4k:g5ZLXc3w+rtYGTea/h1O4yXHJbL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e7b69f91e3d5761ceb45631ded0f036_JaffaCakes118
Files
-
0e7b69f91e3d5761ceb45631ded0f036_JaffaCakes118.exe windows:5 windows x86 arch:x86
74e257af49aabb20b0b0d59c231e4367
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateIcon
BlockInput
GetDC
BeginPaint
LoadMenuA
DrawTextA
LoadCursorA
GetWindowTextA
AlignRects
CloseWindow
IsMenu
DrawIcon
CalcMenuBar
GetCursor
AppendMenuA
GetWindowTextLengthA
IsWindow
GetDlgItem
DrawIconEx
DialogBoxParamA
CreateIcon
DrawIconEx
GetFocus
AppendMenuW
InsertMenuA
LoadMenuA
BeginPaint
CopyImage
GetMenu
DrawIcon
LoadCursorA
CalcMenuBar
AppendMenuA
CopyRect
DialogBoxParamW
EndDialog
IsWindow
BeginPaint
CloseWindow
CreateIcon
DrawTextW
LoadMenuA
AppendMenuW
GetCursor
CopyIcon
DrawIconEx
GetWindowTextLengthA
AppendMenuA
DrawIcon
DrawTextA
IsMenu
DialogBoxParamA
InsertMenuA
GetWindowTextLengthA
CopyImage
GetWindowTextA
GetFocus
GetCursor
CalcMenuBar
CloseWindow
AlignRects
DrawIconEx
GetDlgItem
IsMenu
CreateIcon
CloseWindow
AppendMenuW
DrawTextA
AlignRects
IsWindow
AppendMenuA
CopyImage
GetFocus
LoadMenuA
DrawTextW
BlockInput
EndDialog
GetWindowTextA
DrawIconEx
LoadMenuA
CloseWindow
DrawTextW
DrawTextA
LoadCursorA
IsMenu
CreateIcon
InsertMenuA
EndDialog
CopyIcon
BlockInput
CopyImage
AlignRects
CopyRect
kernel32
FatalExit
FreeResource
CreateDirectoryA
DeleteFileA
GetLocalTime
FlushFileBuffers
GlobalFree
GetLastError
GetStdHandle
ExitThread
DeleteAtom
OpenFile
AddAtomW
GetCommandLineA
GetPriorityClass
FindAtomA
FindAtomW
GetFileTime
ReadFile
OpenFileMappingA
GetCPInfo
ExitProcess
AddAtomA
DeleteFileW
CopyFileExA
GetPriorityClass
AddAtomW
GetLocalTime
FindAtomW
OpenFileMappingA
DeleteFileW
DeleteAtom
GetLastError
DeleteFileA
FindAtomA
FlushFileBuffers
ReadFile
DeleteAtom
GetCommandLineA
FreeResource
DeleteFileA
CopyFileExA
WriteFile
GetCPInfo
FindAtomW
FlushFileBuffers
AddAtomA
GlobalFree
CopyFileA
ReadFile
OpenFileMappingA
CopyFileExA
AddAtomA
FlushFileBuffers
ExitProcess
GlobalFree
FindAtomW
AddAtomW
GetCommandLineA
DeleteFileW
FindClose
DeleteFileA
GetPriorityClass
CopyFileExW
GetFileTime
FreeResource
CopyFileA
GetLastError
GetFileType
CopyFileA
GetStdHandle
DeleteAtom
GetPriorityClass
GlobalFree
AddAtomA
ReadFile
DeleteFileA
ExitThread
FreeResource
WriteFile
GetFileTime
CopyFileExA
DeleteAtom
GetCPInfo
GetCommandLineA
CopyFileExW
FlushFileBuffers
ReadFile
GetStdHandle
GlobalFree
ExitProcess
CreateDirectoryA
GetFileType
FindAtomW
CopyFileA
OpenFile
ExitThread
GetLastError
DeleteFileW
FatalExit
CreateDirectoryA
OpenFile
CopyFileExA
FindAtomA
FreeResource
FlushFileBuffers
GetCPInfo
AddAtomW
GetFileTime
AddAtomA
GetFileType
AddAtomA
OpenFile
AddAtomW
GetLocalTime
WriteFile
ExitProcess
GetCPInfo
CopyFileExW
FindClose
CopyFileA
GetPriorityClass
GetFileType
GetFileTime
DeleteFileW
CreateDirectoryA
FindAtomA
DeleteAtom
FindAtomW
advapi32
RegQueryValueExA
RegLoadKeyA
RegQueryValueA
RegEnumValueW
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyExW
RegFlushKey
RegEnumValueA
RegDeleteKeyW
RegLoadKeyW
RegQueryInfoKeyW
RegDeleteValueA
RegCreateKeyW
RegCreateKeyExW
RegOpenKeyA
RegReplaceKeyW
RegEnumKeyW
RegLoadKeyA
RegOpenKeyW
RegEnumKeyA
RegReplaceKeyA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExA
RegEnumKeyExA
RegFlushKey
RegReplaceKeyW
RegQueryValueW
RegGetKeySecurity
RegCreateKeyExW
RegOpenKeyExA
RegQueryValueExW
RegQueryValueA
RegEnumKeyA
RegReplaceKeyA
RegEnumKeyW
RegQueryInfoKeyW
RegCreateKeyW
RegCreateKeyA
RegCreateKeyA
RegReplaceKeyA
RegOpenKeyExA
RegDeleteValueW
RegQueryInfoKeyA
RegCreateKeyExW
RegEnumKeyExA
RegLoadKeyA
RegQueryValueA
RegOpenKeyW
RegEnumKeyA
RegEnumValueA
RegReplaceKeyW
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExW
RegReplaceKeyW
RegCreateKeyW
RegQueryValueA
RegOpenKeyA
RegQueryValueExW
RegEnumKeyExA
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyA
RegDeleteValueA
RegDeleteValueW
RegEnumKeyExW
RegLoadKeyW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyW
RegCreateKeyExA
RegOpenKeyExW
RegFlushKey
RegCreateKeyExW
RegOpenKeyW
RegQueryInfoKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyExW
RegCreateKeyW
RegDeleteValueW
RegEnumKeyExA
RegOpenKeyA
RegDeleteKeyW
Sections
.egh25 Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.42ba Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.a963d Size: 107KB - Virtual size: 414KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.abf5a Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ