Static task
static1
Behavioral task
behavioral1
Sample
124b7f290b5ec35fcbeaf19d203b86eb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
124b7f290b5ec35fcbeaf19d203b86eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
124b7f290b5ec35fcbeaf19d203b86eb_JaffaCakes118
-
Size
87KB
-
MD5
124b7f290b5ec35fcbeaf19d203b86eb
-
SHA1
a4ff401708fb5d0978a5a98b9c451d688fa9dd71
-
SHA256
ee80fb05aa6ad1f8c7026378e1bc78d44c8f57b498f34fe94842e502178fc520
-
SHA512
16d52a3fcc72c692b599306e8930e37b140b63603397128e1dfd102a3124201807399122496206dd44f6cf26c7c68c03161a029211835135cb492c2f691d3722
-
SSDEEP
1536:2iqj4SJzjXvuFzzf9zDmK1iFAafrnlcfnpVZDzzvFBOZ6S:2fjbJX/ezJvF1iFHfrmvB/z9BC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 124b7f290b5ec35fcbeaf19d203b86eb_JaffaCakes118
Files
-
124b7f290b5ec35fcbeaf19d203b86eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
9740d2e2f8f917b56760a6f5ef356756
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumValueW
RegOpenKeyW
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegEnumKeyW
RegCreateKeyW
RegReplaceKeyW
RegQueryInfoKeyW
RegDeleteValueW
RegDeleteKeyW
RegDeleteKeyA
RegOpenKeyExW
RegQueryValueA
RegQueryValueW
RegOpenKeyA
RegDeleteValueW
RegReplaceKeyW
RegGetKeySecurity
RegEnumKeyA
RegFlushKey
RegEnumValueW
RegCreateKeyExW
RegLoadKeyW
RegQueryValueExW
RegLoadKeyA
RegReplaceKeyA
RegEnumValueA
RegCreateKeyA
kernel32
OpenFileMappingA
ReadFile
CreateDirectoryA
DeleteAtom
FlushFileBuffers
FindAtomA
GetCPInfo
OpenFile
FatalExit
FindClose
GetStdHandle
CopyFileA
FindAtomA
GetFileTime
FlushFileBuffers
CopyFileExA
CopyFileA
OpenFile
CreateDirectoryA
FreeResource
FatalExit
OpenFileMappingA
WriteFile
GetFileType
CopyFileExW
GetLastError
FreeResource
GetLocalTime
WriteFile
GetFileType
ReadFile
OpenFile
DeleteAtom
CopyFileA
AddAtomA
GetPriorityClass
DeleteFileW
GetCPInfo
ExitProcess
GetFileTime
GetStdHandle
FatalExit
FindAtomA
CopyFileExA
GlobalFree
AddAtomA
FatalExit
GetFileTime
GetFileType
FindClose
FlushFileBuffers
GetStdHandle
OpenFile
DeleteFileA
ExitThread
CopyFileA
GetLastError
user32
DialogBoxParamA
GetDC
DrawIconEx
CreateIcon
GetWindowTextA
DialogBoxParamW
CopyIcon
DrawTextW
IsMenu
GetMenu
CopyImage
DrawTextA
CopyRect
CalcMenuBar
CopyImage
DialogBoxParamW
DialogBoxParamA
LoadMenuA
DrawIcon
AppendMenuA
CopyIcon
GetDlgItem
DrawTextW
AlignRects
GetFocus
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 46KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 719B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ