Static task
static1
Behavioral task
behavioral1
Sample
14470c0b9ba8bfd635dc367603e751e6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14470c0b9ba8bfd635dc367603e751e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14470c0b9ba8bfd635dc367603e751e6_JaffaCakes118
-
Size
23KB
-
MD5
14470c0b9ba8bfd635dc367603e751e6
-
SHA1
7d389df14107f3aa8d47fd17795e857ec496567f
-
SHA256
b953c1d01de948ecd28020e9340522d9fb898859849e395ca7b9561b1aeb1617
-
SHA512
c5fc78deac8d4ca0b6d60d3e3c21dbcc9195e64de4c4b7146d9d0ad417bdf2a77dcfca47de2c952cea121d574e14a8dc90dff174a42b7da810d4647b278c7fc2
-
SSDEEP
384:hh2WdKTVv7Zj6KPLERDRP4y+KNF0/aPot44a3adxX9tVNV7UgOWrQB2:h4WdKTZ7cKPLER0Kgt44PxHVNV9vr7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14470c0b9ba8bfd635dc367603e751e6_JaffaCakes118
Files
-
14470c0b9ba8bfd635dc367603e751e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
788fdfcaeb1c72975ce11c7dfbc770ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
dwLBSubclass
GetOpenFileNameA
PrintDlgA
CommDlgExtendedError
LoadAlterBitmap
ChooseColorA
PrintDlgExA
ChooseFontA
ReplaceTextA
FindTextA
GetSaveFileNameA
WantArrows
dwOKSubclass
GetFileTitleA
PageSetupDlgA
advapi32
RegSetValueExW
RegEnumValueW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW
RegDeleteValueA
CloseServiceHandle
RegOpenKeyExW
RegCreateKeyExW
AccessCheckByTypeAndAuditAlarmA
OpenProcessToken
RegDeleteValueW
GetLengthSid
AddAccessAllowedAce
AllocateAndInitializeSid
RegOpenKeyExA
InitializeSecurityDescriptor
AccessCheckByTypeResultListAndAuditAlarmByHandleW
RegDeleteKeyW
GetTokenInformation
RegQueryValueExA
RegSetValueExA
RegQueryInfoKeyW
RegEnumKeyExA
OpenThreadToken
NotifyBootConfigStatus
FreeSid
RegCreateKeyExA
RegDeleteKeyA
kernel32
LoadLibraryA
CreateFileA
GetSystemTimeAsFileTime
WritePrivateProfileStringA
CreateFileW
VirtualAlloc
MultiByteToWideChar
WriteConsoleInputA
WritePrivateProfileSectionA
FindResourceA
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter
SleepEx
WaitForSingleObject
TerminateProcess
WriteProfileSectionW
LoadResource
GetCurrentThreadId
GetTickCount
GetProcAddress
Sleep
GetCurrentProcessId
FreeLibrary
TerminateThread
GetCurrentProcess
TlsFree
ExitProcess
CloseHandle
WaitForSingleObjectEx
WriteConsoleW
Sections
BSS Size: - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 406B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ