Static task
static1
Behavioral task
behavioral1
Sample
7ba6470395ec556171166e236ecd1175_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7ba6470395ec556171166e236ecd1175_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
7ba6470395ec556171166e236ecd1175_JaffaCakes118
-
Size
4.5MB
-
MD5
7ba6470395ec556171166e236ecd1175
-
SHA1
716249d4583d2f859976743c968397276c14a763
-
SHA256
2ce043124dd0bb5dd6aa66f2f2fd737a14baf3cea0dc1568398f07474f5bf7db
-
SHA512
b6c8085084939487b5e7d15f7aa38c419cef789f79f3519346e42d1a0849149483e1f3592a566f6f0cbbc0c5fee541e08585cc93fdf5065b738060558b54609d
-
SSDEEP
98304:bw04x4WQBkLoqFbGLPbfvaHjQRWQwMf6ln/+eyPFlpzuRz7PLF:bw004Wz0qFifaHjmWKC/TelFGJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ba6470395ec556171166e236ecd1175_JaffaCakes118
Files
-
7ba6470395ec556171166e236ecd1175_JaffaCakes118.exe windows:4 windows x86 arch:x86
5cb773d722840e0e6b67816c712236f1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
FindExecutableA
user32
ShowWindow
DefWindowProcA
BeginPaint
GetSysColor
GetClientRect
SetRect
EndPaint
SetWindowWord
GetWindowWord
RegisterClassA
OemToCharA
CharToOemA
OemToCharBuffA
LoadCursorA
DestroyWindow
SetWindowTextA
SendMessageA
EnableWindow
PostMessageA
GetLastActivePopup
SetWindowPos
CharNextA
SetTimer
KillTimer
DialogBoxIndirectParamA
GetWindowRect
GetSystemMetrics
GetKeyState
PeekMessageA
TranslateMessage
DispatchMessageA
GetParent
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItem
InvalidateRect
UpdateWindow
wsprintfA
MessageBoxA
SetCursor
GetDlgItemTextA
EndDialog
kernel32
CreateDirectoryA
_lclose
_lopen
GlobalHandle
RtlUnwind
lstrcmpA
GetCommandLineA
GetModuleHandleA
ExitProcess
SetErrorMode
GetVersion
LoadLibraryA
GetProcAddress
GetModuleFileNameA
FreeLibrary
lstrcmpiA
GetWindowsDirectoryA
GetEnvironmentVariableA
LocalAlloc
LocalFree
GlobalUnlock
lstrcpyA
GlobalFree
GlobalAlloc
GlobalLock
WinExec
_llseek
GetDriveTypeA
_lread
_lwrite
GetVolumeInformationA
FindClose
FindFirstFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
lstrlenA
lstrcatA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
_lcreat
gdi32
SetTextColor
SetTextAlign
GetTextExtentPoint32A
GetBkColor
DeleteObject
SetBkColor
ExtTextOutA
CreateDCA
GetDeviceCaps
CreateFontIndirectA
DeleteDC
SelectObject
advapi32
RegQueryValueA
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ