Static task
static1
Behavioral task
behavioral1
Sample
447eb7bf6c3f8bf184ead0aef793ba68_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
447eb7bf6c3f8bf184ead0aef793ba68_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
447eb7bf6c3f8bf184ead0aef793ba68_JaffaCakes118
-
Size
135KB
-
MD5
447eb7bf6c3f8bf184ead0aef793ba68
-
SHA1
5d3f75f62eafc3ec22d1408ba6bf20ad8065f0e3
-
SHA256
e9a5e2467733f954ec3644e1afc28850affae9ea2ab30c81da251022f3768ae8
-
SHA512
e3883cf5d8fe3d855e4983147156400f9dbb88f153a9e851848e7cfd612ccdbf0a513f2c5d90c9ed1b2063aae48186c9167e08092c3f8ce22db0ce60e94781ac
-
SSDEEP
3072:QFkX/aRzke7bfAstYZvS4s6ljD4a4XMH66vdVCEOBEJA1:WmavYZvS4GXMHu3BEa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 447eb7bf6c3f8bf184ead0aef793ba68_JaffaCakes118
Files
-
447eb7bf6c3f8bf184ead0aef793ba68_JaffaCakes118.exe windows:4 windows x86 arch:x86
9e573ea74905c1feb4225caab406e1fc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyA
RegOpenKeyW
RegOpenKeyA
RegOpenKeyExW
RegEnumValueW
RegQueryInfoKeyA
RegQueryValueA
RegLoadKeyA
RegCreateKeyExA
RegQueryValueExA
RegDeleteValueW
RegEnumValueA
RegQueryValueW
RegCreateKeyExW
RegDeleteValueA
RegQueryValueExW
RegReplaceKeyA
RegLoadKeyW
RegFlushKey
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExA
RegEnumKeyExW
RegDeleteKeyA
RegCreateKeyW
RegGetKeySecurity
RegQueryInfoKeyW
RegReplaceKeyW
RegEnumKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegOpenKeyA
RegLoadKeyW
RegGetKeySecurity
RegDeleteValueW
RegOpenKeyExA
RegOpenKeyW
RegEnumKeyW
RegQueryInfoKeyW
RegDeleteValueA
RegReplaceKeyW
RegEnumValueA
RegEnumKeyExW
RegFlushKey
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExA
RegCreateKeyExW
RegCreateKeyExA
RegReplaceKeyA
RegLoadKeyA
RegQueryValueA
RegQueryValueExA
RegDeleteKeyA
RegQueryValueW
RegCreateKeyW
RegEnumKeyA
RegEnumValueW
user32
GetDC
GetWindowTextLengthA
CopyRect
EndDialog
LoadMenuA
DrawIcon
DialogBoxParamA
BlockInput
CopyImage
IsMenu
DrawTextA
LoadCursorA
DialogBoxParamW
DrawTextW
CreateIcon
CloseWindow
AlignRects
AppendMenuA
CalcMenuBar
GetFocus
GetCursor
InsertMenuA
GetWindowTextA
GetMenu
GetDlgItem
DrawIconEx
AppendMenuW
CopyIcon
IsWindow
kernel32
CloseHandle
lstrcmpiA
CloseHandle
ExitProcess
CloseHandle
lstrcpynA
CloseHandle
lstrcpyA
CloseHandle
lstrlenA
CloseHandle
lstrcatA
CloseHandle
GetFileSize
CloseHandle
GetLocalTime
CloseHandle
FreeLibrary
Sections
.tadt Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdaaa Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eddaa Size: 9KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ