Static task
static1
Behavioral task
behavioral1
Sample
5380bff77fe576ebbcc5d173f6b806de_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
5380bff77fe576ebbcc5d173f6b806de_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5380bff77fe576ebbcc5d173f6b806de_JaffaCakes118
-
Size
96KB
-
MD5
5380bff77fe576ebbcc5d173f6b806de
-
SHA1
281fe7859606d024f4d23deb6ac0eaea4e7c1f23
-
SHA256
e21c3c7406c173cb2a7a021829e838274e39a79104d76590ba74a8b563dd160a
-
SHA512
405b2684eddf145e5a060da270cb9cc07555d64f9876bb188f88ab930b65999e20d5ca92eb523bf58d18439f38554ac9ffb19912adddb2f1f668b4d9beadcda1
-
SSDEEP
1536:CJCzJ8HPx4SwPM50XAo77JSDXepwOKTOiu+3g:/t8vx4pP4QAoBmOpwO7i9g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5380bff77fe576ebbcc5d173f6b806de_JaffaCakes118
Files
-
5380bff77fe576ebbcc5d173f6b806de_JaffaCakes118.exe windows:4 windows x86 arch:x86
55f11a04bb7629413827c2a553b4dd77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextA
InsertMenuA
DialogBoxParamW
LoadCursorA
GetCursor
DialogBoxParamA
AppendMenuA
AlignRects
DrawTextW
GetMenu
GetWindowTextLengthA
DrawIconEx
CopyIcon
GetFocus
CalcMenuBar
LoadMenuA
CloseWindow
CreateIcon
AppendMenuW
CreateIcon
CopyRect
AppendMenuW
AppendMenuA
DrawTextW
CopyIcon
DrawTextA
GetDlgItem
CopyImage
GetMenu
GetWindowTextA
BlockInput
LoadMenuA
EndDialog
InsertMenuA
LoadCursorA
GetCursor
DialogBoxParamA
LoadMenuA
AppendMenuW
GetFocus
LoadCursorA
DrawTextW
CalcMenuBar
IsWindow
GetMenu
CopyIcon
GetWindowTextLengthA
DrawIcon
AlignRects
InsertMenuA
CreateIcon
DrawTextW
BlockInput
CopyIcon
GetFocus
GetCursor
DialogBoxParamW
DrawIcon
IsWindow
CalcMenuBar
IsMenu
AppendMenuW
GetMenu
kernel32
GetCurrentThreadId
OpenFile
DeleteFileW
GetFileSize
Sleep
GetComputerNameA
GetCPInfo
CreateThread
GetCurrentThread
GetLastError
GetUserDefaultLangID
GetCurrentProcessId
GetConsoleMode
GlobalFree
GetLastError
GetCurrentThread
GetCPInfo
CreateProcessA
GetComputerNameA
DeleteFileW
Sleep
GetUserDefaultLangID
GetConsoleOutputCP
GetFileSize
FindAtomA
GetFileTime
DeleteFileA
GetCurrentProcess
GlobalFree
GetCurrentThreadId
FindFirstFileA
advapi32
RegOpenKeyA
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueA
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyW
RegFlushKey
RegQueryValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegQueryValueA
RegOpenKeyExA
RegLoadKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumValueA
RegQueryValueExA
RegOpenKeyW
RegReplaceKeyW
RegQueryValueW
RegOpenKeyExW
RegDeleteValueA
RegCreateKeyExW
RegQueryInfoKeyW
RegReplaceKeyA
RegEnumValueW
RegEnumKeyExW
RegFlushKey
RegEnumKeyW
RegQueryValueExA
RegEnumKeyA
RegDeleteKeyA
RegLoadKeyW
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
RegQueryInfoKeyA
RegDeleteValueA
RegQueryValueW
RegCreateKeyExA
RegCreateKeyW
RegLoadKeyA
RegReplaceKeyW
RegDeleteKeyA
RegEnumKeyExW
RegEnumValueA
RegEnumKeyA
RegCreateKeyExW
RegLoadKeyW
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 46KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ