Static task
static1
Behavioral task
behavioral1
Sample
2a2588265e5443c3d2d1354de293ba5a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a2588265e5443c3d2d1354de293ba5a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a2588265e5443c3d2d1354de293ba5a_JaffaCakes118
-
Size
30KB
-
MD5
2a2588265e5443c3d2d1354de293ba5a
-
SHA1
32dc7fc461c1ea9066b641722435f244c4b164a0
-
SHA256
05d4f2ba82288b88515165c9e736847f248d59be0066cf2d4b985d492392ff63
-
SHA512
93fb0f5300052123d0f22c6853279a724d9f68b97d8d6efe8ec775355d1cc3ffa3c77a50af09a2fcd77127a0cabefdd11270990d58d8bb8331ea9320c9e35be3
-
SSDEEP
384:QQDjLju7RSNXR2zOegHxTobF7UXl8rDbJJLlDcvk41pv:RM8XsiHxTobCl8rndcr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a2588265e5443c3d2d1354de293ba5a_JaffaCakes118
Files
-
2a2588265e5443c3d2d1354de293ba5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
61be4adb36a86b0d9ce703fe9908362f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyExW
RegOpenKeyA
RegLoadKeyW
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExA
RegQueryValueA
RegEnumValueA
RegCreateKeyExW
RegDeleteValueA
RegOpenKeyW
RegEnumKeyA
RegReplaceKeyA
RegCreateKeyW
RegCreateKeyExA
RegDeleteValueW
RegDeleteKeyA
user32
AlignRects
CreateIcon
BlockInput
GetDC
DrawTextW
CloseWindow
CalcMenuBar
IsMenu
LoadCursorA
GetWindowTextLengthA
GetWindowTextA
InsertMenuA
DialogBoxParamA
LoadMenuA
GetDlgItem
GetMenu
GetFocus
DialogBoxParamW
CopyIcon
comctl32
ImageList_GetImageInfo
ImageList_Copy
ImageList_DragMove
ImageList_DrawIndirect
ImageList_GetDragImage
ImageList_LoadImage
ImageList_GetImageCount
ImageList_AddIcon
ImageList_BeginDrag
ImageList_Merge
ImageList_DragLeave
ImageList_GetIconSize
ImageList_GetIcon
ImageList_EndDrag
ImageList_LoadImageW
ImageList_Draw
ImageList_GetImageRect
ImageList_Destroy
ImageList_Read
kernel32
ExitThread
GetLastError
GetCPInfo
GetStdHandle
CopyFileA
SetLastError
DeleteFileW
CreateProcessA
GetConsoleMode
DeleteFileA
GetComputerNameA
WriteFile
ReadFile
Sleep
CopyFileExW
FindAtomA
DeleteAtom
FindFirstFileA
gdi32
CloseMetaFile
AddFontResourceTracking
DeleteObject
GetBitmapBits
GetCurrentPositionEx
ClearBrushAttributes
GetPixel
GetBrushOrgEx
DeleteDC
CancelDC
AddFontMemResourceEx
AddFontResourceExW
SetTextColor
CopyMetaFileA
ClearBitmapAttributes
AbortPath
AddFontResourceExA
GetDCOrgEx
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ