Static task
static1
Behavioral task
behavioral1
Sample
fd5c62be3a0ce2503bb7431297a88e90_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd5c62be3a0ce2503bb7431297a88e90_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd5c62be3a0ce2503bb7431297a88e90_JaffaCakes118
-
Size
27KB
-
MD5
fd5c62be3a0ce2503bb7431297a88e90
-
SHA1
4ab3995411398ecd34ae236ce8ee29bfe276d4db
-
SHA256
e593538a206e0e5a491d113fb220e1fbe63911747b39d8ce1ac01ec9b9239ec8
-
SHA512
6164a4d49132b17b9d65335099d40b6ee7bbd0f20a639fd7e00e7e501e130134d22671e0bb4e53e15a5186d2542502369eab6513b6565aae80178b58c53f3b9c
-
SSDEEP
384:l9Lx3GpHRTLSF3EyZAOt9252lCnM/lGakpe9NXDUDM1qjW7PykJPK:z89SF39RtE52kelBfPXQMHqkJPK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd5c62be3a0ce2503bb7431297a88e90_JaffaCakes118
Files
-
fd5c62be3a0ce2503bb7431297a88e90_JaffaCakes118.exe windows:4 windows x86 arch:x86
525a7adc97148f69e263cbcfc81e9c62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextA
CreateIcon
GetDlgItem
GetMenu
GetDC
CloseWindow
DrawIconEx
DialogBoxParamA
CopyImage
CopyIcon
CopyRect
GetCursor
DrawIcon
InsertMenuA
LoadCursorA
DialogBoxParamW
LoadMenuA
DrawTextW
GetWindowTextLengthA
GetFocus
EndDialog
IsMenu
IsWindow
kernel32
GetStartupInfoA
GetCPInfo
GetStringTypeW
SetFilePointer
MultiByteToWideChar
WriteFile
GetVersion
LCMapStringW
lstrcpynA
GetStdHandle
TerminateProcess
GetCommandLineA
GetACP
GetModuleFileNameA
GetFileType
CreateFileA
GetStringTypeA
SetHandleCount
lstrcatA
GetOEMCP
lstrcpynW
GetCurrentProcess
lstrcpyA
LCMapStringA
comctl32
MenuHelp
CreateStatusWindowW
ImageList_GetIconSize
ImageList_Create
ImageList_GetIcon
CreateToolbar
ImageList_DragEnter
ImageList_AddIcon
CreateToolbarEx
ImageList_Add
CreateStatusWindow
ImageList_LoadImageW
CreateUpDownControl
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ