Static task
static1
Behavioral task
behavioral1
Sample
f97387cf1ed097f9f1185ecb8d63d425_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f97387cf1ed097f9f1185ecb8d63d425_JaffaCakes118
-
Size
418KB
-
MD5
f97387cf1ed097f9f1185ecb8d63d425
-
SHA1
a737798f98adfedab12d1b8161ebfc0db31767da
-
SHA256
b4bb472d39c592fc4e99ecdd59cc1284255666c72ba5eccc7f5b39780e53141e
-
SHA512
b8aadb681f1e492bea50f722d34a431c5fb46c32fdb23ca54f5bc43474672dae49ef95d3e3188b739561b6f76c8d05b1ab07d34473da2c3a1dcfff18a866185d
-
SSDEEP
6144:3LTfaVy5OOu+n20JpbO8yfyV68lyixJQ0KDJNXiTF85rDcp0+DMC:vfalOu+n/U8c50WNCFy3x+QC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f97387cf1ed097f9f1185ecb8d63d425_JaffaCakes118
Files
-
f97387cf1ed097f9f1185ecb8d63d425_JaffaCakes118.exe windows:6 windows x86 arch:x86
fb3173a5f2fac421132f53c478a667b9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
atoi
_XcptFilter
__set_app_type
_except_handler3
_exit
_controlfp
__dllonexit
_onexit
free
fwrite
rand
_wtoi
strcspn
malloc
fread
__p__fmode
atof
rewind
system
fseek
memcpy
remove
fclose
fopen
__p__commode
ftell
winmm
PlaySoundW
kernel32
lstrcmpW
LocalFree
GetCommandLineW
VirtualProtect
GetModuleHandleA
GetStartupInfoA
shell32
CommandLineToArgvW
SHGetFolderPathW
user32
SetWindowPos
GetWindowRect
GetWindowTextLengthW
GrayStringA
GetDC
LoadImageW
PostQuitMessage
SetWindowLongW
wsprintfW
SetFocus
IsWindow
ShowWindow
GetSystemMetrics
SendMessageW
LoadImageA
GetSysColorBrush
LoadCursorW
TranslateMessage
RegisterClassW
DispatchMessageW
GetMessageW
RedrawWindow
GetClientRect
DrawTextW
InvalidateRect
GetWindowTextW
DefWindowProcW
FillRect
SetWindowTextW
MapWindowPoints
CreateWindowExW
gdi32
CreateSolidBrush
SetBkMode
SetTextColor
SelectObject
BitBlt
SetBkColor
GetStockObject
CreateFontW
CreateCompatibleDC
GetObjectW
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ