Static task
static1
Behavioral task
behavioral1
Sample
967b60fcdb9b6333fcfa3e4bcfc1856f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
967b60fcdb9b6333fcfa3e4bcfc1856f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
967b60fcdb9b6333fcfa3e4bcfc1856f_JaffaCakes118
-
Size
485KB
-
MD5
967b60fcdb9b6333fcfa3e4bcfc1856f
-
SHA1
756799245bc3ec264c6b0b6f3711010d4925fb42
-
SHA256
2156f58490ddcfec23b4195d5699d7c9874491f3405ea4bb8ca4fd483a634cc2
-
SHA512
7f6e98f5d4052cc0104efafe2f922691ef70a315032d766c335aff0b9dc94b20271e774e65b842db0cc1ed62f2e6007fca9a86c4662d4b7ffa5f837ff314ccdb
-
SSDEEP
12288:uXrrAA1AtA28z7s+QVJNlGFSZTpQmIxzjt:UAA1iALQVNVKFj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 967b60fcdb9b6333fcfa3e4bcfc1856f_JaffaCakes118
Files
-
967b60fcdb9b6333fcfa3e4bcfc1856f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f6f3e62da61d31674c8f96b61177c25f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
BeginPaint
RegisterClassExA
LoadIconA
GetWindowRect
DispatchMessageA
GetMessageA
DrawTextA
EndPaint
PostQuitMessage
LoadStringA
SetFocus
DialogBoxParamA
DefWindowProcA
DestroyWindow
EndDialog
SendMessageA
wsprintfA
CreateWindowExA
LoadBitmapW
MoveWindow
SetWindowPos
InvalidateRect
EnableWindow
FlashWindowEx
GetParent
GetKeyState
DeferWindowPos
SetWindowLongW
GetWindowLongW
DrawFocusRect
IsChild
DrawFrameControl
GetScrollInfo
TranslateMessage
GetClassNameA
kernel32
GetLastError
GetModuleHandleA
GetSystemInfo
lstrcmpA
lstrcatA
GetCurrentDirectoryA
GetVersionExA
CreateFileA
GetStartupInfoA
lstrlenA
comctl32
ord17
msvcrt
exit
_exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ