Static task
static1
Behavioral task
behavioral1
Sample
f2628ff3fa58e64abe121336ecb4fe55_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2628ff3fa58e64abe121336ecb4fe55_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f2628ff3fa58e64abe121336ecb4fe55_JaffaCakes118
-
Size
54KB
-
MD5
f2628ff3fa58e64abe121336ecb4fe55
-
SHA1
7a101f004bd2b08f507f0b1c7ce4d3c110cc38d1
-
SHA256
c99e43e29d011a71943aaabec24d820908de8635e1dc87a7ee0eb8b9664d3e95
-
SHA512
1c082764497bdffd12068b89ed7129ff587ecfba62687a890da1be2f4abc286c0fe4f54573b6d705d4d57fa4d3502e46e3692315c4276946e3069573254e4c74
-
SSDEEP
768:Up22V6J0eP887xBISRxHKKySSR6PYEXXcJFjYLP:cYJtPTtqjR6dck
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2628ff3fa58e64abe121336ecb4fe55_JaffaCakes118
Files
-
f2628ff3fa58e64abe121336ecb4fe55_JaffaCakes118.exe windows:5 windows x86 arch:x86
7c1fd1a52e59b7d6ef7bf55e7e7bc123
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
LoadLibraryW
GetWindowsDirectoryA
lstrcatA
CreateFileA
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
IsZoomed
LoadAcceleratorsW
LoadIconW
OpenClipboard
PeekMessageW
GetWindowPlacement
PostQuitMessage
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
ScreenToClient
SetCapture
SetCursor
SetCursorPos
SetWindowTextW
SetWindowsHookExW
ShowCursor
ShowWindow
TranslateMDISysAccel
TranslateMessage
UpdateWindow
wsprintfW
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetMessageW
GetMenu
GetDlgItemInt
GetClipboardData
GetClientRect
FillRect
EnumChildWindows
EndPaint
EnableWindow
DrawMenuBar
DispatchMessageW
DestroyWindow
DefMDIChildProcW
DefFrameProcW
CreateDialogParamW
CloseClipboard
CheckMenuItem
CallNextHookEx
BeginPaint
PostMessageW
gdi32
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectW
CreateSolidBrush
DeleteDC
DeleteObject
Escape
ExtTextOutW
TranslateCharsetInfo
TextOutW
StretchBlt
SetTextColor
SetStretchBltMode
SetBkColor
SelectObject
PatBlt
GetTextMetricsW
GetTextFaceW
GetTextExtentPointW
GetTextExtentPoint32W
GetStockObject
GetDeviceCaps
BitBlt
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.22 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.221 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 750B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ