Static task
static1
Behavioral task
behavioral1
Sample
2ce31dd7a1c2a40e851ead121bb226b0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ce31dd7a1c2a40e851ead121bb226b0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ce31dd7a1c2a40e851ead121bb226b0_JaffaCakes118
-
Size
141KB
-
MD5
2ce31dd7a1c2a40e851ead121bb226b0
-
SHA1
516a86dc6a5aa243f8dd4567e8fa9c9a699be9ea
-
SHA256
e93d771158000e61960d943f21fa59edacf0037492efbc05198696ec8bba9d28
-
SHA512
c30ced7319ebaaf859f28697836a72c33b9fb3ba7136692427e444d72abd81ac70e5a6394f64887326fd2a5b50b0acd6d7d66ef40a613ce125bd2e1377f6148c
-
SSDEEP
3072:7t/SmvWuV3ajS6DS5FiA59kAPtY3eIb173U/uy89Bk7G:5/nr3uyFiATzPtY3jZky
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ce31dd7a1c2a40e851ead121bb226b0_JaffaCakes118
Files
-
2ce31dd7a1c2a40e851ead121bb226b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
18b1151a89b29f0a63e533c607a0e5b9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InsertMenuA
CloseWindow
IsWindow
GetCursor
CreateIcon
DrawIcon
AppendMenuA
GetFocus
DrawTextW
DrawIconEx
AlignRects
DialogBoxParamW
EndDialog
IsMenu
AppendMenuW
LoadMenuA
GetWindowTextA
GetDC
DrawTextA
CopyIcon
DialogBoxParamA
CalcMenuBar
BlockInput
GetDlgItem
CopyImage
GetWindowTextLengthA
LoadCursorA
GetMenu
CopyRect
GetWindowTextA
AppendMenuW
CreateIcon
EndDialog
DrawTextA
CalcMenuBar
GetDC
AppendMenuA
GetDlgItem
InsertMenuA
GetCursor
DialogBoxParamW
LoadCursorA
IsWindow
CopyRect
IsMenu
DialogBoxParamA
GetFocus
GetMenu
AlignRects
BlockInput
CopyImage
GetWindowTextLengthA
CopyIcon
DrawTextW
DrawIcon
LoadMenuA
DrawIconEx
CloseWindow
kernel32
GetACP
GetCPInfo
GetACP
GetDateFormatA
GetACP
FreeLibrary
GetACP
lstrcpynA
GetACP
GetConsoleCP
GetACP
lstrcpyA
GetACP
lstrcatA
GetACP
GetStringTypeW
GetACP
WideCharToMultiByte
advapi32
RegReplaceKeyA
RegGetKeySecurity
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueW
RegOpenKeyExA
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegReplaceKeyW
RegQueryInfoKeyW
RegEnumKeyA
RegQueryValueW
RegEnumKeyW
RegOpenKeyA
RegCreateKeyW
RegQueryValueExA
RegLoadKeyW
RegQueryValueExW
RegQueryValueA
RegCreateKeyExW
RegEnumValueA
RegOpenKeyW
RegDeleteKeyW
RegQueryInfoKeyA
RegDeleteValueA
RegFlushKey
RegEnumKeyExA
RegLoadKeyA
RegEnumValueW
RegOpenKeyA
RegOpenKeyExW
RegOpenKeyExA
RegGetKeySecurity
RegReplaceKeyW
RegCreateKeyExW
RegDeleteValueA
RegEnumValueA
RegCreateKeyExA
RegLoadKeyA
RegDeleteKeyW
RegLoadKeyW
RegQueryValueExW
RegQueryInfoKeyA
RegEnumKeyW
RegQueryValueExA
RegQueryInfoKeyW
RegQueryValueW
RegEnumKeyExA
RegFlushKey
RegOpenKeyW
RegCreateKeyW
RegDeleteValueW
RegReplaceKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyExW
RegEnumKeyA
Sections
.tedt Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.radta Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 7KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ