Static task
static1
Behavioral task
behavioral1
Sample
2523d4c29b570652b608f5026b3f068e_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2523d4c29b570652b608f5026b3f068e_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
2523d4c29b570652b608f5026b3f068e_JaffaCakes118
-
Size
356KB
-
MD5
2523d4c29b570652b608f5026b3f068e
-
SHA1
3049ffc7f7ecc9a8f24fbd9b67a91ccd44821cef
-
SHA256
856c83e4bd9e463cfc0ee5ad88ad9e459a540db080630ea19b9de42926ba4f2a
-
SHA512
f1abfe83f7ea506ad98391fff2f08cb22f71ee3717a6644cc78dc35152309a8cf44c753eaf5e984813e9290faba7f7721c3cfb7019daf594fa1c3d786403feda
-
SSDEEP
6144:5gb/TKVTqAJBfc3OfoaupVtN3AiD9C9uEGHKousVQIrwL4ONT+V7DM1AzzfRA273:ab/T6TqK9crpVPAiD9C9uEG7VxctVC7N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2523d4c29b570652b608f5026b3f068e_JaffaCakes118
Files
-
2523d4c29b570652b608f5026b3f068e_JaffaCakes118.exe windows:4 windows x86 arch:x86
8cf4475039ff2768e0889c2bdb7dea49
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
comctl32
ImageList_SetBkColor
ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy
advapi32
LsaSetSystemAccessAccount
user32
SetWindowLongA
LookupIconIdFromDirectoryEx
GetWindowTextA
GetIconInfo
LoadCursorA
ClientToScreen
GetSystemMetrics
EnableMenuItem
ScreenToClient
SetWindowLongW
SendMessageA
CreateIconFromResourceEx
ReleaseDC
GetMenuStringW
KillTimer
GetMenuStringA
RegisterClassA
GetMenuState
DestroyWindow
SetDlgItemTextW
SetWindowTextW
CreateDialogParamW
CallWindowProcW
GetCursorPos
SetDlgItemTextA
GetKeyState
CreateIconIndirect
UnregisterClassA
CallWindowProcA
GetDC
CreateWindowExW
TrackPopupMenu
MessageBoxW
RegisterClassW
SetWindowPos
UnregisterClassW
LoadImageA
GetWindowLongA
UpdateWindow
CreateWindowExA
GetSubMenu
GetDlgItem
GetWindowLongW
SetTimer
DefWindowProcA
DefWindowProcW
GetWindowTextW
PostMessageA
SetActiveWindow
LoadImageW
DestroyIcon
InvalidateRect
IsWindowVisible
kernel32
LoadLibraryA
SearchPathW
ExpandEnvironmentStringsA
LoadResource
LoadLibraryExA
MulDiv
CloseHandle
LoadLibraryExW
GlobalAlloc
SizeofResource
EnumResourceNamesA
ExpandEnvironmentStringsW
SearchPathA
FreeLibrary
CreateProcessA
CreateProcessW
GetWindowsDirectoryW
GetProcessHeap
lstrlenW
lstrlenA
LockResource
GetModuleHandleA
FindResourceA
ExitProcess
GetProcAddress
gdi32
SetDIBits
GetDIBits
GetDeviceCaps
DeleteObject
GetObjectA
Sections
.text Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE