Static task
static1
Behavioral task
behavioral1
Sample
16ff7dcae02240e7204ea480f5edafe9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16ff7dcae02240e7204ea480f5edafe9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16ff7dcae02240e7204ea480f5edafe9_JaffaCakes118
-
Size
95KB
-
MD5
16ff7dcae02240e7204ea480f5edafe9
-
SHA1
740ada32ed3ca89615db7bfd26a101075cb9e745
-
SHA256
4a5500aca3f6c0c6eb2d8fc3b16b639f5e7f106f7d97125ed4012f97b713685d
-
SHA512
42db46b072ad448b20805afad7f119cd83aa5dd1dd95b8156d251d15c1ef657c5eec50e33054c87292b83190a396263964a539654dcc171d25f9ae67a1f9e3fd
-
SSDEEP
1536:tWa02XXr7O2ALUWGnF8Aa7wf3otk1bPh52JvLE0gOho3v4LaAVXS2TmpNflF:waXqUWgspG17hc3gvKzVXziHlF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ff7dcae02240e7204ea480f5edafe9_JaffaCakes118
Files
-
16ff7dcae02240e7204ea480f5edafe9_JaffaCakes118.exe windows:4 windows x86 arch:x86
db5f00467b96924a316203d3170e1f09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_DragLeave
ImageList_Read
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_Copy
ImageList_GetDragImage
ImageList_AddIcon
ImageList_GetIcon
ImageList_Replace
ImageList_Remove
ImageList_Merge
advapi32
RegCreateKeyExA
RegOpenKeyExW
RegDeleteKeyA
RegEnumKeyExA
RegDeleteValueW
RegEnumKeyW
RegGetKeySecurity
RegQueryValueW
RegQueryValueExW
RegEnumKeyExW
RegCreateKeyExW
RegReplaceKeyA
RegDeleteKeyW
RegLoadKeyA
RegQueryInfoKeyW
RegDeleteValueA
RegEnumValueW
RegFlushKey
RegLoadKeyW
user32
LoadMenuA
GetMenu
InsertMenuA
CloseWindow
DrawIconEx
GetDC
AppendMenuW
EndDialog
DrawIcon
CalcMenuBar
DrawTextW
IsMenu
AlignRects
GetWindowTextA
LoadCursorA
CopyImage
kernel32
GlobalFree
GetModuleHandleA
Sleep
SetLastError
lstrcmpiA
FreeLibrary
GetStringTypeA
GetFileAttributesA
WideCharToMultiByte
GetModuleFileNameA
lstrcmpA
HeapFree
GetStringTypeW
GetLastError
GetDateFormatA
GetCPInfo
GetCommandLineA
CloseHandle
GetFileSize
lstrcpynA
Sections
.IehZ Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.qwuH Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.OmaJcr Size: 5KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LzByVm Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ