Static task
static1
Behavioral task
behavioral1
Sample
f14cab39671f73d32332e9a554bd148f_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f14cab39671f73d32332e9a554bd148f_JaffaCakes118
-
Size
16KB
-
MD5
f14cab39671f73d32332e9a554bd148f
-
SHA1
59a71ad6c2f820b8e65e62bb6210393e08af10e1
-
SHA256
1ceaebbf20a7ce1a6ddc9771c1f52322f99cf840d005da9c859609e502a48c7b
-
SHA512
e1932a4969d653047b6656b62a632bb2d7499ee998011ba8d2ebe0443c34ab42d57f50783f59494c9b7fa9d0a19366207af9e7cb7d25a0ef33a4d7ce23c2bef8
-
SSDEEP
384:E+tPt9G7ZBczDrlRDVAJ8sN6cH5q0omvG5krdcWZ:5tPt074zD5RDVA2sN6cR9qY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f14cab39671f73d32332e9a554bd148f_JaffaCakes118
Files
-
f14cab39671f73d32332e9a554bd148f_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ccd4d788b66d36d38b6d803541b3940
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CommConfigDialogA
CreateDirectoryA
ExitProcess
GetConsoleOutputCP
GetStdHandle
GetVersionExW
GlobalFindAtomW
LoadResource
MultiByteToWideChar
OpenSemaphoreW
PeekConsoleInputW
Process32First
VirtualQuery
VirtualQueryEx
lstrcmp
advapi32
AccessCheck
AdjustTokenPrivileges
GetExplicitEntriesFromAclA
GetSecurityDescriptorDacl
InitializeAcl
InitializeSecurityDescriptor
NotifyBootConfigStatus
OpenEventLogA
ReadEventLogA
RegCreateKeyW
ReportEventW
TrusteeAccessToObjectA
user32
CreateDialogIndirectParamA
CreateDialogParamW
DdeConnect
DdeImpersonateClient
DefMDIChildProcW
DlgDirListComboBoxW
EndPaint
EnumDisplayMonitors
GetInputState
GetMenuDefaultItem
GetWindowModuleFileNameA
GetWindowModuleFileNameW
IsWindowUnicode
LoadStringA
RegisterClassExW
gdi32
ArcTo
CreateDiscardableBitmap
CreateFontIndirectW
CreateRectRgn
FillPath
FillRgn
FrameRgn
GetLogColorSpaceW
GetOutlineTextMetricsW
GetWindowOrgEx
SelectPalette
SetColorSpace
SetDIBColorTable
SetPolyFillMode
SetRectRgn
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE