Static task
static1
Behavioral task
behavioral1
Sample
f0be0045615828c897701c7c4e1345dd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0be0045615828c897701c7c4e1345dd_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0be0045615828c897701c7c4e1345dd_JaffaCakes118
-
Size
327KB
-
MD5
f0be0045615828c897701c7c4e1345dd
-
SHA1
85f56664b92dc7882bff2d07a6ee6a315f8b623c
-
SHA256
33dbaf9bd12dfcb947b5b460b55c716e7c48829fecb3224c9eb31a7be33e73cf
-
SHA512
0de19ad09a662b52332ecbe6f4d7881e5aa212e8f45b2bb06e052de7a2476b17a3cd655ca63efca4861f12b501a6eff6a1d37c58651ad54a3c279aa6c404d25d
-
SSDEEP
6144:ntZg7gT5XLo5qAnnk6N5vC4PZN/ma2xgp8884+3UcTmeZBllOXMJu:ntm7g9XVmnpDC6V26pX8MzkBqXV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0be0045615828c897701c7c4e1345dd_JaffaCakes118
Files
-
f0be0045615828c897701c7c4e1345dd_JaffaCakes118.exe windows:5 windows x86 arch:x86
7fff505887581390a0e5fadf9e917ccc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
VirtualAlloc
GetProcAddress
user32
DispatchMessageA
EnableWindow
GetDC
GetDlgItem
GetDlgItemTextA
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowRect
IsDlgButtonChecked
CheckRadioButton
MessageBeep
MessageBoxA
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetWindowLongA
ShowWindow
wsprintfA
CheckDlgButton
CharPrevA
CharNextA
CallWindowProcA
LoadIconA
LoadStringA
gdi32
CreateFontIndirectA
DeleteObject
GetDeviceCaps
GetObjectA
GetStockObject
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
m9 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
m8 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
m7 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
m6 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
m5 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
m4 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
m3 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 309KB - Virtual size: 309KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ