Static task
static1
Behavioral task
behavioral1
Sample
fe166abc8c45ede0c397f92fd671a309_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe166abc8c45ede0c397f92fd671a309_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe166abc8c45ede0c397f92fd671a309_JaffaCakes118
-
Size
154KB
-
MD5
fe166abc8c45ede0c397f92fd671a309
-
SHA1
bc39b79b09f96f90bcd19b21dcaeb7f8393e2442
-
SHA256
7dd1b963953bd60dd5917bdebdff21e9eb855a2b7b2716201e4a389e51f38779
-
SHA512
66096804157110fd7fcf227dbb34cda235f3c7fbecdbcff08dbcfd8d2dbfe69fed029ba185023f542d55c349230b17aaf03a96fdf054a152ca20ae0aa61c99e5
-
SSDEEP
1536:s8++bByQfqMIoMIbzqm8Mlq4DISNmkaQy2PCYtH3vRKvcsk76KiEeHWQmE3:s89bYQiMIoMIbeyFDDmkaQy2L3JZlY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe166abc8c45ede0c397f92fd671a309_JaffaCakes118
Files
-
fe166abc8c45ede0c397f92fd671a309_JaffaCakes118.exe windows:4 windows x86 arch:x86
8297f1422ff2b29e460639867c3a5cbd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
GetExitCodeThread
user32
FillRect
GetClientRect
GetMenuState
GetSystemMetrics
CheckMenuItem
GetSubMenu
LoadAcceleratorsA
IsDialogMessageA
TranslateAcceleratorA
DestroyAcceleratorTable
CreatePopupMenu
DrawFocusRect
CopyRect
DrawEdge
PtInRect
InvalidateRect
DrawTextA
DrawIconEx
GetWindowRect
GetWindowDC
SystemParametersInfoA
AppendMenuA
SendDlgItemMessageA
CheckDlgButton
DestroyMenu
GetSysColor
RedrawWindow
SendMessageA
PostMessageA
GetWindowTextLengthA
ReleaseDC
DestroyIcon
GetDlgItemInt
IsDlgButtonChecked
TrackPopupMenu
GetSysColorBrush
CallWindowProcA
comctl32
ImageList_Destroy
ImageList_GetIcon
ImageList_LoadImageA
ord6
ord17
comdlg32
ChooseColorA
GetOpenFileNameA
shell32
ShellExecuteA
gdi32
DeleteObject
SetBkColor
SetTextColor
SetBkMode
SelectObject
CreateFontIndirectA
CreateSolidBrush
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ