Static task
static1
Behavioral task
behavioral1
Sample
07c16fa8dfba22f2d75d541b732ea1a1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07c16fa8dfba22f2d75d541b732ea1a1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
07c16fa8dfba22f2d75d541b732ea1a1_JaffaCakes118
-
Size
17KB
-
MD5
07c16fa8dfba22f2d75d541b732ea1a1
-
SHA1
fd186c218227cb19abefe493cc50dac33a7914d4
-
SHA256
a187d0ba51c507c88fb2306acc037dc04b736e428b903afcae80eb594c3250a6
-
SHA512
5b1ca2743c92bd882ce91c21852da36bb33026795bfa1629c49c6940104bfe261a87bf5ca4a462a5e71a5ea47125dcdf451762bb7352d9bb786843aebccd9e3e
-
SSDEEP
384:I5Zf3BZCz5RurOsIihUPj7ODr0JAmSHXaOnW8U:2ZZMEnqXODr0JmdQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07c16fa8dfba22f2d75d541b732ea1a1_JaffaCakes118
Files
-
07c16fa8dfba22f2d75d541b732ea1a1_JaffaCakes118.exe windows:5 windows x86 arch:x86
b14914304009c18f22adbf772d2884ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxW
BeginPaint
DispatchMessageA
LoadIconW
EndPaint
GetMessageA
PostQuitMessage
LoadCursorW
TranslateMessage
LoadBitmapA
CreateWindowExA
RegisterClassExA
PostMessageA
DefWindowProcA
SetWindowTextA
DrawTextA
GetClassLongA
kernel32
GetModuleHandleA
GetFileSize
UnmapViewOfFile
MapViewOfFile
CreateFileW
GetProcAddress
gdi32
CreateCompatibleBitmap
DeleteObject
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 738B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ