Static task
static1
Behavioral task
behavioral1
Sample
0247b21417db02a0104975a54c498a66_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0247b21417db02a0104975a54c498a66_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0247b21417db02a0104975a54c498a66_JaffaCakes118
-
Size
41KB
-
MD5
0247b21417db02a0104975a54c498a66
-
SHA1
e8ac286b98360ad974ce2973b7dd76a99d4d0ccf
-
SHA256
35a2b2192838afec8a72ec9bd6201902f5e710c70b0e8e48f95e82c54f0958ae
-
SHA512
9c6d25b889f67a592c54fca70d4d4ab00bb56f7e1959e2a34cd83e3c537e45f65711fd3ea9822d0863ef62cee9d02562e2265f44bebe36274779229c3f3b3c45
-
SSDEEP
768:HqNhNDgvk9Kwu9tQBBT0PivUV4jaIRMEurQWvzoQGGm829Fm128L:KNrONKBGPIW4cfvs3HZmZL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0247b21417db02a0104975a54c498a66_JaffaCakes118
Files
-
0247b21417db02a0104975a54c498a66_JaffaCakes118.exe windows:4 windows x86 arch:x86
a7c59f6d0c45b496e4d58667842d7a7d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
GetEnvironmentVariableA
FindFirstChangeNotificationW
GetCurrentProcessId
OpenFileMappingA
GetConsoleAliasW
OpenFile
SetInformationJobObject
GetLastError
SetLastError
MapUserPhysicalPages
lstrcpyW
RtlMoveMemory
ReleaseMutex
GetACP
SystemTimeToTzSpecificLocalTime
CreateNamedPipeW
GetFileAttributesExA
GetThreadContext
GetVolumeNameForVolumeMountPointW
WaitForMultipleObjects
SetLastConsoleEventActive
VirtualProtect
MoveFileExW
RtlUnwind
user32
SetCursor
MapWindowPoints
UserLpkPSMTextOut
CascadeWindows
SendMessageCallbackA
SetMenuItemInfoA
UserRealizePalette
BroadcastSystemMessageW
ValidateRect
VkKeyScanExW
ClientThreadSetup
SetParent
SendMessageW
LockSetForegroundWindow
SetSysColorsTemp
EnumDisplaySettingsExA
ChangeDisplaySettingsW
EnableWindow
DialogBoxIndirectParamW
GetInputDesktop
ScrollDC
GetWindowThreadProcessId
BeginDeferWindowPos
ShowCursor
GetAncestor
DrawStateW
CtxInitUser32
GetDesktopWindow
SetCaretPos
GetTopWindow
gdi32
CreateDIBPatternBrush
RemoveFontMemResourceEx
GetStringBitmapA
BRUSHOBJ_hGetColorTransform
CreateICW
EngQueryLocalTime
GdiConvertAndCheckDC
ResetDCA
GetCurrentPositionEx
GdiEntry11
GdiGetDevmodeForPage
cGetTTFFromFOT
AddFontResourceW
GetCharWidth32A
GdiCreateLocalMetaFilePict
EngTextOut
GetViewportExtEx
GetKerningPairsW
EngAssociateSurface
GetDCPenColor
comdlg32
PageSetupDlgW
PrintDlgW
ChooseColorW
GetOpenFileNameA
ChooseFontW
GetFileTitleA
WantArrows
PrintDlgExA
FindTextA
dwOKSubclass
ReplaceTextW
Sections
.text Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE