Static task
static1
Behavioral task
behavioral1
Sample
424a2c31c4bbf4da25bb52dde0037c4e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
424a2c31c4bbf4da25bb52dde0037c4e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
424a2c31c4bbf4da25bb52dde0037c4e_JaffaCakes118
-
Size
252KB
-
MD5
424a2c31c4bbf4da25bb52dde0037c4e
-
SHA1
ba3f2b71b5ab74d5648a8e511faaabffbb78440d
-
SHA256
0993a70cb82529046c9363860034a7bb005d2140be2e1891fce7f0c567936eb4
-
SHA512
dacd584264346771f036ea7d7be9c3c6c3af3891bfa25478afa8f3782893c39194f204106383490edb7a18178072b57170746aeac77372db8dcaaa87300cfc05
-
SSDEEP
6144:DIaqUhctV/KDQxr4CTPpDoRz45eydsgzSe8ozF3hl:QP/K6MCdkz0l8IF3hl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 424a2c31c4bbf4da25bb52dde0037c4e_JaffaCakes118
Files
-
424a2c31c4bbf4da25bb52dde0037c4e_JaffaCakes118.exe windows:4 windows x86 arch:x86
fb6f827e64e8d70ec565e380c4a210e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetLocalTime
CloseHandle
GetStringTypeA
CloseHandle
WideCharToMultiByte
CloseHandle
Sleep
CloseHandle
GetCPInfo
CloseHandle
HeapFree
CloseHandle
lstrlenA
CloseHandle
GetStringTypeW
CloseHandle
advapi32
RegReplaceKeyW
RegCreateKeyW
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegOpenKeyA
RegReplaceKeyA
RegEnumValueA
RegDeleteValueW
RegQueryInfoKeyA
RegQueryValueW
RegLoadKeyA
RegOpenKeyExA
RegCreateKeyExA
RegGetKeySecurity
RegCreateKeyExW
RegFlushKey
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueA
RegQueryValueExA
RegQueryValueA
RegEnumValueW
RegEnumKeyExA
RegEnumKeyExW
RegLoadKeyW
RegQueryInfoKeyW
RegGetKeySecurity
RegEnumValueW
RegCreateKeyExA
RegQueryValueA
RegFlushKey
RegDeleteKeyA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExW
RegQueryValueW
RegQueryValueExA
RegReplaceKeyA
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueA
RegReplaceKeyW
RegLoadKeyA
RegDeleteValueW
RegLoadKeyW
RegEnumKeyExA
RegQueryValueExW
RegCreateKeyW
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyA
RegCreateKeyExW
RegEnumKeyW
user32
IsMenu
GetDC
CopyIcon
CreateIcon
GetMenu
InsertMenuA
CalcMenuBar
GetFocus
DrawIconEx
GetDlgItem
CopyRect
DialogBoxParamW
GetWindowTextLengthA
BlockInput
LoadMenuA
DrawTextA
GetWindowTextA
GetCursor
IsWindow
AlignRects
CloseWindow
LoadCursorA
DrawTextW
AppendMenuA
DialogBoxParamA
EndDialog
CopyImage
DrawIcon
AppendMenuW
CopyIcon
CreateIcon
CopyRect
GetMenu
DrawIcon
DrawTextA
AppendMenuA
DrawTextW
DialogBoxParamW
DrawIconEx
CloseWindow
AppendMenuW
GetWindowTextLengthA
AlignRects
EndDialog
LoadCursorA
LoadMenuA
IsMenu
GetDlgItem
CopyImage
IsWindow
CalcMenuBar
GetFocus
BlockInput
GetDC
DialogBoxParamA
GetCursor
InsertMenuA
GetWindowTextA
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d5ta Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rd05a Size: 7KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 77B
IMAGE_SCN_MEM_READ
.r72c Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ