_mwWLRoAZh@4
Static task
static1
Behavioral task
behavioral1
Sample
ebafec31057df7fd974bfd60fc3c1522_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ebafec31057df7fd974bfd60fc3c1522_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ebafec31057df7fd974bfd60fc3c1522_JaffaCakes118
-
Size
132KB
-
MD5
ebafec31057df7fd974bfd60fc3c1522
-
SHA1
49d7409bd7df7054c5942e0c6cdbcf94ce5253ce
-
SHA256
127ebf2e1d942462c028ba1b75ac2df5b9c0611217e5f834566607f4abf8fcdb
-
SHA512
dd3fab63a5ac8f044044ebe5a6d34d0e26f3ab5e76255dc5e2db181d603c7b48a2d56a5c1835e195097c62445979ea2ec1c33b1dec0ce0cb50e77a201c430d0f
-
SSDEEP
3072:DKpoGy4t0cadSC1bYcRW1F2sP4zUazUojomHz+:m2GzxC1scR5zKP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebafec31057df7fd974bfd60fc3c1522_JaffaCakes118
Files
-
ebafec31057df7fd974bfd60fc3c1522_JaffaCakes118.exe windows:4 windows x86 arch:x86
36281846f34873c2a177f0c0d77a7d9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetOpenFileNameA
FindTextA
shlwapi
SHSetValueA
SHStrDupA
PathFileExistsA
SHGetValueA
oleaut32
SysAllocStringLen
SafeArrayPtrOfIndex
RegisterTypeLib
SysReAllocStringLen
VariantCopyInd
VariantChangeType
advapi32
RegEnumKeyExA
RegQueryValueA
GetLengthSid
RegOpenKeyA
gdi32
SelectPalette
GetTextColor
comctl32
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_Remove
ImageList_Destroy
ImageList_Add
ImageList_Write
ImageList_Create
ImageList_Read
ImageList_Draw
shell32
SHGetDiskFreeSpaceA
SHFileOperationA
SHGetDesktopFolder
Shell_NotifyIconW
user32
MessageBeep
MsgWaitForMultipleObjects
GetKeyboardLayoutList
WaitMessage
GetMenuState
MoveWindow
SetClipboardData
IsRectEmpty
GetKeyboardType
IsCharLowerA
LoadKeyboardLayoutA
GetMenuItemCount
IsIconic
WindowFromPoint
SetRect
GetPropA
DeleteMenu
SetWindowsHookExA
GetDlgItem
CreateIcon
IsCharUpperA
EndDialog
SetForegroundWindow
CharNextW
GetWindowDC
GetSystemMetrics
SetMenuItemInfoA
GetWindow
SetActiveWindow
LoadIconA
DrawMenuBar
GetSystemMenu
DestroyMenu
LoadStringA
DestroyIcon
CharUpperA
GetMenu
CreateMenu
DispatchMessageW
IsZoomed
IsChild
MapWindowPoints
GetWindowTextLengthA
DefWindowProcA
MessageBoxA
RedrawWindow
PtInRect
ShowOwnedPopups
GetTopWindow
ActivateKeyboardLayout
RemovePropA
GetKeyboardLayout
IsDlgButtonChecked
ReleaseDC
GetSysColorBrush
CharNextA
FrameRect
GetKeyNameTextA
IsWindow
GetClipboardData
GetLastActivePopup
IsMenu
DrawFrameControl
CharUpperBuffA
DestroyWindow
EndPaint
KillTimer
TrackPopupMenu
EnableWindow
OffsetRect
IsWindowVisible
SetClassLongA
GetSysColor
GetClassLongA
UpdateWindow
IsDialogMessageA
EmptyClipboard
GetWindowLongA
GetClassInfoA
OpenIcon
GetActiveWindow
SetMenu
SetCursor
IsWindowEnabled
SetScrollRange
OpenClipboard
UnregisterClassA
DrawIcon
PostMessageA
CreatePopupMenu
EnumThreadWindows
ScreenToClient
ClientToScreen
GetCursorPos
ole32
CLSIDFromString
GetHGlobalFromStream
kernel32
GetTickCount
ExitProcess
GetModuleHandleA
GetUserDefaultLCID
LoadLibraryA
GetThreadLocale
VirtualAllocEx
GetSystemDefaultLangID
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 109KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
.data
-
.rdata
-
.rsrc/0/DIALOG/TEXTFILEDLG
-
.rsrc/0/MANIFEST/1.xml
-
.rsrc/0/RCDATA/DVCLAL
-
.rsrc/0/STRING/4094
-
.rsrc/0/STRING/4095
-
.rsrc/1033/BITMAP/BBABORT.bmp
-
.rsrc/1033/version.txt
-
.text