Static task
static1
Behavioral task
behavioral1
Sample
0412ba09d34084fb2172dc27b8e17bab_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0412ba09d34084fb2172dc27b8e17bab_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0412ba09d34084fb2172dc27b8e17bab_JaffaCakes118
-
Size
121KB
-
MD5
0412ba09d34084fb2172dc27b8e17bab
-
SHA1
d11fdeaa328dff6b2a2dcfc9c6beb96262796b7a
-
SHA256
d455720fdfa589c441cdd1d59a55f1fce2eb4296ad88bc4f863de4cd692d0fa4
-
SHA512
8589339b68e8d2f6a2033d4bffebfdd07d264ec4a0e2d35222a6889f44a10d6fc37e56e917509d3ee9cbbf87fac85c251b401ba7b9393889cdaeb4edc2cd0e58
-
SSDEEP
1536:jNxxmEDtqrQ8NSP5re9zSCREd+blIUuKSbT10Zu3hpqlHc:RxQEDtqrQ5re9BS+blIpNtix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0412ba09d34084fb2172dc27b8e17bab_JaffaCakes118
Files
-
0412ba09d34084fb2172dc27b8e17bab_JaffaCakes118.exe windows:4 windows x86 arch:x86
9dfe3650a0316b3d237fb157b095d9f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDIBColorTable
GetDCOrgEx
CreatePalette
SelectPalette
SetTextColor
GetCurrentPositionEx
user32
RegisterClipboardFormatA
GetKeyboardState
GetKeyboardLayout
SetFocus
IsRectEmpty
InflateRect
OffsetRect
RemoveMenu
IsWindowUnicode
AdjustWindowRectEx
CharUpperBuffA
CallWindowProcA
SetTimer
GetMessagePos
BeginPaint
SendMessageW
GetScrollRange
IsDialogMessageW
DrawIcon
SetActiveWindow
DrawMenuBar
SetScrollPos
SetWindowPlacement
RegisterWindowMessageA
GetDCEx
ShowOwnedPopups
CheckMenuItem
OemToCharA
GetScrollInfo
EnumWindows
SetCapture
CreateWindowExA
IntersectRect
GetPropA
GetDC
GetCursor
GetWindowLongA
GetClassLongA
GetMenuItemCount
SetParent
GetMenuItemInfoA
RegisterClassA
InvalidateRect
CharLowerBuffA
GetActiveWindow
PeekMessageA
DestroyIcon
EmptyClipboard
EnumThreadWindows
LoadIconA
DrawEdge
ChildWindowFromPoint
DefFrameProcA
wsprintfA
PeekMessageW
DestroyWindow
SetWindowTextA
GetWindowTextA
IsZoomed
IsDialogMessageA
GetFocus
SetWindowPos
EndPaint
DrawIconEx
FrameRect
MessageBoxA
WaitMessage
PostMessageA
KillTimer
IsChild
GetMenuState
GetForegroundWindow
DispatchMessageA
DefWindowProcA
SetMenuItemInfoA
RemovePropA
GetKeyNameTextA
LoadCursorA
SetClipboardData
ShowWindow
CharLowerA
GetWindowRect
GetKeyboardType
EnableWindow
SetWindowLongW
GetSysColor
DefMDIChildProcA
DestroyCursor
UnhookWindowsHookEx
OpenClipboard
GetKeyboardLayoutList
FillRect
TranslateMessage
GetCapture
InsertMenuA
kernel32
VirtualAllocEx
SetHandleCount
InitializeCriticalSection
lstrcatA
lstrcpynA
lstrlenA
ReadFile
GetLocalTime
GetCurrentThreadId
VirtualFree
GetEnvironmentStrings
GetModuleHandleA
GetProcAddress
GlobalAddAtomA
LocalFree
SetEvent
ExitProcess
GetOEMCP
shell32
SHGetFileInfoA
version
VerFindFileA
Sections
CODE Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE