Static task
static1
Behavioral task
behavioral1
Sample
0245ef60b463725d4b2c35520c5fc949_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0245ef60b463725d4b2c35520c5fc949_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0245ef60b463725d4b2c35520c5fc949_JaffaCakes118
-
Size
44KB
-
MD5
0245ef60b463725d4b2c35520c5fc949
-
SHA1
07a3c31e1043cca3c67e971836ab55fe3bab7672
-
SHA256
326ff055eae7e3f51eba1130f11f28293161ee1af881d81d2566d89e5604c263
-
SHA512
ced205102a3f60e68a303c1c2d17c3ffe06e9961e6ef3e873fa9daf6e4548cd84916a9c5de61fb43d7ec403f2a085067f02149de849325bbdb00885c094a314d
-
SSDEEP
768:kJZnI35Jf+L23REq9+c9AFpkE/Co5AH6WoaR6U+64Ysd:kfC+qBnP9Al/CoWae6rv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0245ef60b463725d4b2c35520c5fc949_JaffaCakes118
Files
-
0245ef60b463725d4b2c35520c5fc949_JaffaCakes118.exe windows:4 windows x86 arch:x86
525ebf51ad968ac1767f7d2de66d4422
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassNameA
FindWindowExA
CharUpperBuffA
GetWindowLongA
GetDC
GetForegroundWindow
GetClientRect
SendMessageA
MessageBoxA
kernel32
lstrlenA
CreateThread
CreateFileA
GetVersionExA
lstrcpyA
ReadFile
VirtualAlloc
GetFileTime
GetLastError
GetModuleHandleA
GetTickCount
DeleteFileA
lstrcmpiA
GetLocaleInfoA
TerminateThread
VirtualFree
SetEndOfFile
SetFilePointer
CloseHandle
WideCharToMultiByte
GetProcAddress
WriteFile
ExitProcess
LoadLibraryA
lstrcatA
GetFileSize
lstrlenW
lstrcmpA
Sleep
gdi32
GetPixel
CreateCompatibleDC
SelectObject
DeleteDC
BitBlt
CreateDCA
DeleteObject
CreateDIBSection
GetDIBits
SetPixel
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_INIT_ Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE