Static task
static1
Behavioral task
behavioral1
Sample
e873c4ba0ea580d5fd3ed7dbb184b12d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e873c4ba0ea580d5fd3ed7dbb184b12d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e873c4ba0ea580d5fd3ed7dbb184b12d_JaffaCakes118
-
Size
271KB
-
MD5
e873c4ba0ea580d5fd3ed7dbb184b12d
-
SHA1
daec1ef6a9a5c7f4aaf3167cddc7911f2a1b7ebd
-
SHA256
c988722817a0c75f4551c9813ee7c5ca01b074005b6fc85879219010302ac2fc
-
SHA512
5c9fd878b548731094ab0e2cec8bbbd3356b0c699580c3f17c5145555b83a003334c5bcdc564c867a78242e086f2e8ee3236be5cc5197315df9f42d6acf38c18
-
SSDEEP
3072:UUqoTC64ItqPycEH8voJwQgsaESa28NCR5pIy6AUIpqgs7LJv/NqCAeqfbMqyh9:rqoTTHQPILJtndS2ipqrJHzbqfbmh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e873c4ba0ea580d5fd3ed7dbb184b12d_JaffaCakes118
Files
-
e873c4ba0ea580d5fd3ed7dbb184b12d_JaffaCakes118.exe windows:4 windows x86 arch:x86
7d72181848735956ebc3b6b5dc90ed3d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CompareStringW
CreateDirectoryA
CreateDirectoryExA
CreateToolhelp32Snapshot
EnumResourceNamesA
ExitProcess
FindFirstFileExA
FindResourceExA
GetBinaryTypeW
GetComputerNameA
GetConsoleTitleA
GetDiskFreeSpaceA
GetModuleHandleA
GetNamedPipeHandleStateW
GetSystemDefaultLCID
GlobalLock
IsBadWritePtr
IsDBCSLeadByte
SearchPathA
SetCommMask
SetComputerNameW
SetFileApisToOEM
Thread32Next
TlsAlloc
TransmitCommChar
_lread
lstrlenA
user32
AdjustWindowRectEx
CharToOemBuffA
CharUpperBuffW
CreateDialogIndirectParamW
CreatePopupMenu
DialogBoxParamW
DlgDirListW
DrawFocusRect
DrawFrameControl
EndTask
EnumWindowStationsA
GetDesktopWindow
GetDlgCtrlID
GetWindowModuleFileNameA
GetWindowTextW
GrayStringW
HideCaret
IntersectRect
LoadAcceleratorsA
MessageBoxExW
RegisterClipboardFormatA
SendDlgItemMessageA
SetCaretBlinkTime
SetWindowTextW
TabbedTextOutW
VkKeyScanExA
gdi32
BeginPath
ColorCorrectPalette
CreateDIBSection
CreatePen
CreateRectRgn
CreateSolidBrush
DeviceCapabilitiesExA
EndPath
ExtFloodFill
ExtTextOutW
GetArcDirection
GetAspectRatioFilterEx
GetBkColor
GetColorAdjustment
GetCurrentPositionEx
GetGlyphOutlineW
GetPixel
GetPolyFillMode
GetRegionData
GetTextFaceW
GetWindowExtEx
IntersectClipRect
InvertRgn
PatBlt
SelectObject
SetSystemPaletteUse
StretchBlt
SwapBuffers
Sections
.text Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 267KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ