Static task
static1
Behavioral task
behavioral1
Sample
52e2d4dfec1fb4ad515876b135c75301_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52e2d4dfec1fb4ad515876b135c75301_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52e2d4dfec1fb4ad515876b135c75301_JaffaCakes118
-
Size
79KB
-
MD5
52e2d4dfec1fb4ad515876b135c75301
-
SHA1
85f1b21d777c21422fc4d3661ae50cbbba481d5b
-
SHA256
d2fe7c570221a46c3ce1420168a045c5b779daf5df38b5affb0aa465b8da91f7
-
SHA512
06e070656b60d3ff4fb8a905b6272986c387b1edf00e3968e09f004872de1afa3e93ba67d295445d2b46d97532b94ff72dbd7d22c38588d4c47ef8346faad24d
-
SSDEEP
768:Ls5wokXzK08aJjqju90CMldopgqg2h7S+UcVAQJ1Ck93NQIFeKOkaBSGQKeDqwEP:o5PlYjDMldOh7lUuv9PQzfs9BOi9y8W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52e2d4dfec1fb4ad515876b135c75301_JaffaCakes118
Files
-
52e2d4dfec1fb4ad515876b135c75301_JaffaCakes118.exe windows:4 windows x86 arch:x86
16e7c1867a7ee3fb7dc9780bb9fbcf6c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CalcMenuBar
EndDialog
IsWindow
CopyRect
DrawTextA
LoadMenuA
AppendMenuW
InsertMenuA
IsMenu
CopyIcon
GetDlgItem
CloseWindow
GetMenu
DrawTextW
GetFocus
BlockInput
GetWindowTextLengthA
DrawIconEx
GetWindowTextA
CreateIcon
DrawIcon
AlignRects
DialogBoxParamW
CopyImage
DialogBoxParamA
LoadCursorA
AppendMenuA
GetDC
GetCursor
advapi32
RegEnumValueA
RegQueryValueExW
RegLoadKeyW
RegQueryInfoKeyA
RegEnumKeyW
RegQueryInfoKeyW
RegQueryValueW
RegDeleteKeyA
RegEnumKeyExA
RegDeleteKeyW
RegReplaceKeyW
RegCreateKeyExA
RegFlushKey
RegOpenKeyA
RegEnumValueW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueA
RegGetKeySecurity
RegEnumKeyA
RegDeleteValueW
RegCreateKeyExW
RegReplaceKeyA
RegOpenKeyW
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegLoadKeyA
RegCreateKeyW
RegReplaceKeyA
RegQueryValueExA
RegCreateKeyW
RegDeleteValueA
RegEnumValueA
RegLoadKeyW
RegEnumKeyA
RegDeleteKeyW
RegOpenKeyA
RegCreateKeyExW
RegLoadKeyA
RegQueryValueA
RegEnumKeyExW
RegDeleteKeyA
RegOpenKeyW
RegOpenKeyExA
RegQueryValueW
RegEnumKeyExA
RegGetKeySecurity
RegFlushKey
RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
RegQueryInfoKeyW
RegQueryValueExW
RegQueryInfoKeyA
RegCreateKeyExA
RegReplaceKeyW
RegEnumKeyW
kernel32
GetLastError
HeapFree
GetLastError
GlobalFree
GetLastError
lstrcpynA
GetLastError
GetCPInfo
GetLastError
GetFileType
GetLastError
HeapAlloc
GetLastError
GetStringTypeW
GetLastError
GetStdHandle
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rddta Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eddta Size: 2KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdloc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idada Size: 1024B - Virtual size: 2KB
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ