Static task
static1
Behavioral task
behavioral1
Sample
292635e9f849afa8223deea8e77825b0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
292635e9f849afa8223deea8e77825b0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
292635e9f849afa8223deea8e77825b0_JaffaCakes118
-
Size
250KB
-
MD5
292635e9f849afa8223deea8e77825b0
-
SHA1
42eb014e56930f6d2dd62fa07b0135490200daf1
-
SHA256
eb7c40effdcf1df09c79f08d5970ba098ec121a71ed2e16be3bedc5bcd388f80
-
SHA512
86e68b25725d836a47afc3a2f8784ffeea76dde09e7a571c8099686e37ff925f99b240bce87d423a98762d5fb31cbbf81c5d093c6ce367894a9ddce49c0c5b00
-
SSDEEP
6144:Pm9T+ux6C/dsPdHeNvIBlxaIQJdXx8rSzC1e:mqGXgHeijAJdGuC1e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 292635e9f849afa8223deea8e77825b0_JaffaCakes118
Files
-
292635e9f849afa8223deea8e77825b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
293c42ce87cefc53bd019858161eee0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
ReadConsoleA
SetLastError
CopyFileW
ReadFile
GetCPInfo
CopyFileExA
CopyFileExW
GetFileSize
OpenFile
DeleteFileA
FindFirstFileA
WriteFile
GetCommandLineA
CreateDirectoryA
GetStdHandle
ExitThread
CreateThread
FindAtomA
DeleteFileW
CopyFileA
CreateProcessA
GetComputerNameA
GetLastError
FindAtomA
CopyFileExW
CopyFileExA
CreateProcessA
CopyFileA
GetCommandLineA
GetFileSize
DeleteFileW
GetStdHandle
ReadFile
GetFileTime
DeleteFileA
FindFirstFileA
OpenFileMappingA
CreateThread
OpenFile
GetComputerNameA
OpenFileMappingA
CreateDirectoryA
CopyFileA
GetCommandLineA
CopyFileW
OpenFile
GlobalFree
CopyFileExA
CreateProcessA
DeleteFileA
GetFileSize
WriteFile
SetLastError
Sleep
CopyFileExW
DeleteFileW
ExitThread
DeleteAtom
GetFileTime
user32
InsertMenuA
DrawTextW
AppendMenuW
CreateIcon
GetDlgItem
CloseWindow
GetMenu
BlockInput
AlignRects
CopyImage
GetCursor
DialogBoxParamA
DrawIconEx
CopyIcon
DrawIcon
LoadCursorA
IsWindow
GetWindowTextLengthA
GetDC
DialogBoxParamA
BlockInput
EndDialog
CalcMenuBar
CopyIcon
GetFocus
AppendMenuA
GetWindowTextLengthA
GetDC
DrawIcon
DialogBoxParamW
AppendMenuW
IsWindow
GetMenu
LoadCursorA
AlignRects
CreateIcon
CopyRect
CloseWindow
LoadMenuA
IsMenu
advapi32
RegEnumValueA
RegEnumKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegCreateKeyExW
RegCreateKeyExA
RegReplaceKeyW
RegFlushKey
RegDeleteValueW
RegOpenKeyW
RegQueryValueW
RegEnumValueW
RegReplaceKeyA
RegGetKeySecurity
RegOpenKeyExA
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueA
RegCreateKeyW
RegEnumKeyW
RegLoadKeyW
RegOpenKeyExW
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueW
RegOpenKeyExW
RegGetKeySecurity
RegOpenKeyW
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExW
RegQueryInfoKeyA
RegDeleteValueW
RegReplaceKeyA
RegEnumValueW
RegEnumKeyW
RegQueryValueA
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegEnumValueA
RegEnumKeyExW
RegLoadKeyA
RegEnumKeyA
RegCreateKeyExW
RegDeleteValueA
RegQueryInfoKeyA
RegReplaceKeyW
RegDeleteKeyW
RegGetKeySecurity
RegQueryValueExA
RegDeleteValueW
RegDeleteKeyA
RegOpenKeyExW
RegOpenKeyExA
RegReplaceKeyA
RegEnumKeyExA
RegQueryInfoKeyW
RegEnumKeyA
RegEnumKeyW
RegOpenKeyA
gdi32
AddFontResourceExA
CancelDC
ClearBitmapAttributes
GetCurrentPositionEx
ExtTextOutA
GetClipBox
CloseMetaFile
GetBrushOrgEx
DeleteObject
CreateSolidBrush
AddFontResourceTracking
AbortPath
AddFontResourceW
GetDCOrgEx
ExcludeClipRect
AddFontResourceA
SetTextColor
CloseFigure
DeleteDC
BitBlt
GetPixel
GetPixel
RestoreDC
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ