Static task
static1
Behavioral task
behavioral1
Sample
400d2cc3c7e04ef3f8ebee66fc450ba5_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
400d2cc3c7e04ef3f8ebee66fc450ba5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
400d2cc3c7e04ef3f8ebee66fc450ba5_JaffaCakes118
-
Size
112KB
-
MD5
400d2cc3c7e04ef3f8ebee66fc450ba5
-
SHA1
0925f1b17010efbc0e2e8b4227b24d5bbcca257e
-
SHA256
e3432b89600931aad7f8e001cdbfe505a93442b4eac0723132747787bf57d47e
-
SHA512
5be4a316e6953e80a8ad5a2957832642919f2e6e75186f011a831427cdb11eac127dc59dfa936d1ad968d6da0dcc72d22cc6fd024a3facaec658fd7e46892109
-
SSDEEP
1536:nu3NfG2clwV+H5DmYwIgrFcmxbQCrKV1Lm3PWVbUB3c:HDHBRnmtQCro1Lb+d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 400d2cc3c7e04ef3f8ebee66fc450ba5_JaffaCakes118
Files
-
400d2cc3c7e04ef3f8ebee66fc450ba5_JaffaCakes118.exe windows:4 windows x86 arch:x86
a71022d424ea7f2751f78fa81135cbfe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryInfoKeyA
RegQueryValueW
RegLoadKeyW
RegOpenKeyExA
RegQueryValueA
RegQueryValueExA
RegCreateKeyExA
RegLoadKeyA
RegReplaceKeyA
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyA
RegQueryValueExW
RegLoadKeyA
RegEnumKeyExA
RegEnumKeyW
RegReplaceKeyW
RegQueryValueA
RegDeleteValueA
RegQueryValueW
RegEnumKeyExW
RegCreateKeyW
RegQueryValueExW
RegEnumKeyA
RegOpenKeyA
RegFlushKey
RegEnumValueW
RegDeleteKeyA
RegDeleteKeyW
RegQueryValueA
RegLoadKeyA
RegReplaceKeyW
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExW
RegCreateKeyW
RegEnumValueA
RegCreateKeyExA
RegReplaceKeyA
RegOpenKeyA
RegEnumKeyA
RegGetKeySecurity
kernel32
CopyFileExW
OpenFileMappingA
CopyFileA
GetComputerNameA
DeleteFileW
ReadFile
GetFileSize
GetStdHandle
OpenFile
CreateDirectoryA
DeleteAtom
GetFileTime
comctl32
ImageList_GetImageRect
ImageList_Create
ImageList_GetDragImage
ImageList_AddMasked
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_Read
ImageList_AddIcon
ImageList_BeginDrag
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_Replace
ImageList_LoadImageW
ImageList_Merge
ImageList_LoadImageA
ImageList_DrawIndirect
ImageList_Draw
ImageList_LoadImageW
ImageList_DrawEx
InitCommonControls
ImageList_Remove
ImageList_Create
ImageList_LoadImage
ImageList_AddIcon
ImageList_DragEnter
ImageList_BeginDrag
ImageList_Copy
ImageList_Merge
ImageList_DrawEx
ImageList_Create
ImageList_GetImageRect
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_GetIconSize
ImageList_GetImageCount
InitCommonControls
ImageList_LoadImageW
ImageList_LoadImage
ImageList_Replace
ImageList_EndDrag
ImageList_GetImageInfo
ImageList_Destroy
ImageList_DragLeave
user32
DrawTextW
EndDialog
AlignRects
CalcMenuBar
GetMenu
DialogBoxParamW
BlockInput
DialogBoxParamA
DrawTextA
CopyIcon
InsertMenuA
CreateIcon
DrawIconEx
GetFocus
CopyRect
GetWindowTextLengthA
AlignRects
CreateIcon
DialogBoxParamW
CopyIcon
InsertMenuA
CloseWindow
AppendMenuW
GetCursor
BlockInput
AppendMenuA
CopyImage
GetDC
GetWindowTextLengthA
InsertMenuA
CalcMenuBar
DialogBoxParamA
GetDC
DrawTextA
DrawIconEx
BlockInput
AppendMenuW
CopyRect
CloseWindow
DrawTextW
LoadCursorA
Sections
.Text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ItExt Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DaTa Size: 8KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TLs Size: 4KB - Virtual size: 193B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rData Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.iDAta Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ