Static task
static1
Behavioral task
behavioral1
Sample
9d3ebaa191b48dee14b7af0e74f5cc89_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9d3ebaa191b48dee14b7af0e74f5cc89_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9d3ebaa191b48dee14b7af0e74f5cc89_JaffaCakes118
-
Size
14KB
-
MD5
9d3ebaa191b48dee14b7af0e74f5cc89
-
SHA1
229fbc7d555baa9e52830955cce55d934a6f3389
-
SHA256
981a6dd95cb5e6c28fc02034b587ccdf18d0bf4503ebb8dc5852fe1bab4c87f8
-
SHA512
7bef63adcde8c76be99c06b7b6950a9bb43076a27bb59e1c417fb522608ae8cd8e48e7e5eee265b4cf39a3bd5f853d5e1b8cf4c8358c5d33b6f9364f94cd5f4a
-
SSDEEP
384:X2oF65bQujOcpfLYJKlNf6cSHmWZyWTKnt:XCbLjOMDgKnNW/Kn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d3ebaa191b48dee14b7af0e74f5cc89_JaffaCakes118
Files
-
9d3ebaa191b48dee14b7af0e74f5cc89_JaffaCakes118.exe windows:1 windows x86 arch:x86
3420d0c2fc033d979a7857941465101f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItem
SystemParametersInfoA
GetForegroundWindow
DefWindowProcA
EnableWindow
GetCursorPos
PostMessageA
SetCursor
IsWindow
GetParent
PostQuitMessage
ReleaseDC
GetDlgItemInt
GetMessageA
SetForegroundWindow
CreateWindowExA
RegisterClassA
FindWindowA
GetSystemMetrics
GetClientRect
LoadIconA
DialogBoxParamA
PeekMessageA
CharNextA
SendDlgItemMessageA
wsprintfA
SendMessageA
WinHelpA
LoadStringA
DispatchMessageA
TranslateMessage
EndDialog
SetTimer
KillTimer
GetDC
FillRect
kernel32
GetTickCount
WritePrivateProfileStringA
LocalFree
lstrcpyA
GetPrivateProfileIntA
LocalAlloc
lstrcmpiA
RtlUnwind
GetCommandLineA
GetStartupInfoA
ExitProcess
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetProcAddress
Sleep
UnhandledExceptionFilter
gdi32
GetRasterizerCaps
PatBlt
CreateICA
CreateFontA
GetTextFaceA
DeleteDC
SetBkColor
SetBkMode
SetTextAlign
SelectObject
SetTextColor
DeleteObject
CreateSolidBrush
GetStockObject
TextOutA
CreateFontIndirectA
comctl32
ord17
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 886B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ