Static task
static1
Behavioral task
behavioral1
Sample
142597f154400388f2681b270528bf56_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
142597f154400388f2681b270528bf56_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
142597f154400388f2681b270528bf56_JaffaCakes118
-
Size
90KB
-
MD5
142597f154400388f2681b270528bf56
-
SHA1
549e07e2d7bf4ae4af97c69a0f041d517299d910
-
SHA256
f6c5468f6ad77365495626cdeb10833dd215124ce724d31a8bae48b3c93df727
-
SHA512
1e8246c788ce53a25da024d200dd2145a677a7b7ce2d73bb739a354d95b3efec2ea2a5e1eab04f55b14cc24aa78cbfae8a8435b302d0498b9db1351f6b9f6505
-
SSDEEP
1536:J1bbuiu5blrQs0+YIheesvau/QF5kopoQZlq5wgdajChJdLIpZuIYk:/Exz0hIheeSTQFuopo+s5UCbaZ3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 142597f154400388f2681b270528bf56_JaffaCakes118
Files
-
142597f154400388f2681b270528bf56_JaffaCakes118.exe windows:4 windows x86 arch:x86
40ddfe1e70319397af8f53fdcdd62379
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DragMove
ImageList_DragShowNolock
ImageList_EndDrag
ImageList_Copy
InitCommonControls
ImageList_Merge
ImageList_DrawIndirect
ImageList_AddIcon
ImageList_GetImageCount
ImageList_Remove
ImageList_GetImageRect
ImageList_Destroy
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Read
ImageList_LoadImageW
ImageList_GetImageInfo
ImageList_LoadImageA
user32
IsWindow
GetCursor
BlockInput
GetFocus
LoadCursorA
CopyImage
CloseWindow
GetWindowTextLengthA
DrawTextA
GetDC
DialogBoxParamA
GetMenu
CreateIcon
InsertMenuA
AppendMenuW
GetDlgItem
GetWindowTextA
LoadMenuA
DrawTextW
IsWindow
GetDC
AlignRects
AppendMenuA
DrawIcon
CalcMenuBar
CreateIcon
LoadMenuA
IsMenu
DrawTextW
AppendMenuW
GetDlgItem
DrawTextA
CloseWindow
CopyImage
BlockInput
GetFocus
DialogBoxParamW
DialogBoxParamA
kernel32
lstrcpynA
GetDateFormatA
lstrcmpiA
GetModuleHandleA
lstrcmpA
GlobalFree
GlobalAlloc
CloseHandle
lstrlenA
lstrcpyA
lstrcatA
GetCommandLineA
GetFileSize
GetStdHandle
GetStringTypeW
Sleep
GetFileAttributesA
SetLastError
advapi32
RegOpenKeyA
RegEnumKeyExW
RegCreateKeyExA
RegEnumValueA
RegCreateKeyW
RegQueryInfoKeyW
RegDeleteValueW
RegQueryValueA
RegOpenKeyExW
RegDeleteValueA
RegQueryValueExA
RegQueryValueExW
RegQueryValueW
RegEnumValueW
RegDeleteKeyW
RegFlushKey
RegLoadKeyA
RegGetKeySecurity
Sections
.wplVBS Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.iRCPaf Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.egvoGW Size: 1024B - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oiSMrd Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ