Static task
static1
Behavioral task
behavioral1
Sample
f16fd434929e66aa95318fe002aac792_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f16fd434929e66aa95318fe002aac792_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f16fd434929e66aa95318fe002aac792_JaffaCakes118
-
Size
62KB
-
MD5
f16fd434929e66aa95318fe002aac792
-
SHA1
553a169a46838d150ee13f6e81d4f85ef670650b
-
SHA256
b4c01fe067cd7498cbb3ad162ac49a805e78590fcaec52a9791442d12251f920
-
SHA512
b9282f8da21b185a1cbb7334c5f871fb09d6d951be4eeac66c4509056b599871ecb05893d91ef01d713bf1c0e9d935a7011814ede01875eb35baa5b0c9399103
-
SSDEEP
768:TSgOEonl7JpJ9P2KEaCu9/jnMXctXVQBWq7kMFmB/W3O7rTYUgyovU9XIOcVnTom:7OBJFP2KEaR/gUoMXIOcVnToIfQo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f16fd434929e66aa95318fe002aac792_JaffaCakes118
Files
-
f16fd434929e66aa95318fe002aac792_JaffaCakes118.exe windows:4 windows x86 arch:x86
cae0e44652327d3c86a8ef271cb2a91d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TrackPopupMenu
ShowWindow
SetWindowTextA
SetWindowPos
SetWindowLongA
SetScrollPos
SendMessageA
SendDlgItemMessageA
ScrollWindow
ReleaseDC
MessageBoxA
LoadMenuA
LoadIconA
GetWindowTextA
GetWindowLongA
GetSystemMetrics
GetSubMenu
GetDlgItem
GetDesktopWindow
GetDC
GetCursorPos
EndPaint
EndDialog
EnableWindow
BeginPaint
CallWindowProcA
CreateDialogParamA
DestroyWindow
DialogBoxParamA
wsprintfA
kernel32
GetProcAddress
GlobalAlloc
GetModuleHandleA
lstrlenA
lstrcmpA
lstrcatA
WriteFile
Sleep
RtlZeroMemory
RtlMoveMemory
ReleaseMutex
ReadFile
PostQueuedCompletionStatus
LoadLibraryA
GlobalFree
GetLastError
GetSystemInfo
CloseHandle
CreateFileA
CreateIoCompletionPort
CreateMutexA
CreateThread
ExitProcess
FlushFileBuffers
GetFileSize
GetQueuedCompletionStatus
gdi32
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetDIBitsToDevice
BitBlt
GetDIBits
DeleteObject
DeleteDC
CreateDCA
ws2_32
accept
bind
closesocket
htons
inet_ntoa
listen
ntohs
WSASocketA
WSASend
WSARecv
WSAGetLastError
WSACleanup
WSAStartup
comdlg32
GetSaveFileNameA
GetOpenFileNameA
msvcrt
free
malloc
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ