Static task
static1
Behavioral task
behavioral1
Sample
fa146100a8473826e82373144fc0cc4d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa146100a8473826e82373144fc0cc4d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa146100a8473826e82373144fc0cc4d_JaffaCakes118
-
Size
35KB
-
MD5
fa146100a8473826e82373144fc0cc4d
-
SHA1
abd13a0e0228a80d6f3c2c57c1b45843c56c4341
-
SHA256
cb8ed232294e3543ad172c89b81475f69f9a53126890a3d9066809cfa1806d39
-
SHA512
307f506ea60464c948b78eabaeee966f3f6ea12262a4185ddacb60e6177bcfd69fe96f64c392e5bfdfeec7d15f384d097d5a607e78bc73f8e5fede09ce984265
-
SSDEEP
768:qSBH9EjnrW0ojGcMcF8uKRy7O2UPO0YEqMVBQF9tEKfjiz:qS9in+y9ueFnYEqMXE9tEo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa146100a8473826e82373144fc0cc4d_JaffaCakes118
Files
-
fa146100a8473826e82373144fc0cc4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
dbc21871698b41fa85d020d07aebb313
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadImageA
LoadIconA
GetWindowTextA
GetWindowLongA
GetSubMenu
LoadMenuA
GetCursorPos
GetClientRect
EndDialog
EnableWindow
EnableMenuItem
LookupIconIdFromDirectoryEx
MessageBoxA
SetWindowLongA
SendMessageA
SetWindowPos
SetWindowTextA
TrackPopupMenu
GetDlgItem
DialogBoxParamA
DestroyIcon
CreateWindowExA
CreateIconFromResourceEx
wsprintfA
kernel32
lstrlenA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
SizeofResource
SetFilePointer
ReadFile
LockResource
LocalFree
LoadResource
LoadLibraryExA
GlobalFree
GlobalAlloc
GetVersionExA
GetModuleHandleA
GetModuleFileNameA
GetFileSize
GetFileAttributesA
CloseHandle
CreateFileA
EnumResourceNamesA
ExitProcess
FindResourceA
FreeLibrary
shlwapi
StrRChrA
StrDupA
StrStrIA
shell32
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetFileInfoA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
comctl32
InitCommonControlsEx
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE