?DmjdjhUYDoiu7DIOdiouYUDIOYuikdHhd@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
0569ad4871778cc64878b766e9b5e990_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0569ad4871778cc64878b766e9b5e990_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0569ad4871778cc64878b766e9b5e990_JaffaCakes118
-
Size
242KB
-
MD5
0569ad4871778cc64878b766e9b5e990
-
SHA1
1197fd515989eb374e0483ed255adce704c807b7
-
SHA256
62ab750c751eb4f51005875184998a975ea8424279ae62cdc00650d853d3cb48
-
SHA512
d9763bb75b5761cb883f6b64edf5ded33625a3a02b0e066d4bf01ba7ab2d9156272d9a490205f021f9c2d6179134b6ecda8711c22cf6c595280e868b8c8c7285
-
SSDEEP
6144:NJntPkVw3nqSBW/YWmNLcvpeXD6QVj9rhj8AP3qP9cCmQ1EM2py:ND8UDWtmNJD6gB14gqKCmQ1I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0569ad4871778cc64878b766e9b5e990_JaffaCakes118
Files
-
0569ad4871778cc64878b766e9b5e990_JaffaCakes118.exe windows:5 windows x86 arch:x86
12d444453e11235f5e1bbd273d974eb7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PageSetupDlgW
ChooseFontW
GetOpenFileNameA
kernel32
GlobalUnlock
LoadLibraryA
SuspendThread
FileTimeToLocalFileTime
FormatMessageW
GlobalSize
LocalFree
IsBadWritePtr
SetEndOfFile
WaitForSingleObject
SetFileApisToOEM
HeapUnlock
lstrcmpA
GetCurrentThreadId
RemoveDirectoryW
CreateSemaphoreW
FindResourceExA
user32
CharToOemA
ModifyMenuA
OffsetRect
GetKeyboardLayoutNameW
GetWindowDC
SendMessageA
GetLastActivePopup
GetDlgItemTextA
HiliteMenuItem
DefDlgProcA
CharNextA
DrawStateA
SetWindowRgn
DrawTextW
VkKeyScanW
InvertRect
SetClassLongW
DefWindowProcA
LoadCursorW
DestroyWindow
IsCharAlphaW
GetDlgItemTextW
FillRect
CheckDlgButton
GetWindowLongW
IsIconic
InternalGetWindowText
CreateDialogParamW
GetAsyncKeyState
GetKeyboardLayoutList
GetParent
GetKeyboardType
CreateAcceleratorTableW
DrawStateW
SetMenuItemInfoW
CopyAcceleratorTableW
EnableScrollBar
SetWindowTextW
gdi32
GetBoundsRect
SetMapMode
RemoveFontResourceW
PatBlt
MoveToEx
GetTextCharsetInfo
ResizePalette
RestoreDC
SetBkColor
GetCurrentObject
IntersectClipRect
GetTextAlign
EnumFontFamiliesW
GetBkMode
SetDIBits
PolyBezier
LineDDA
EnumFontFamiliesExW
Exports
Exports
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.fdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 164KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ