Static task
static1
Behavioral task
behavioral1
Sample
07f10c1cc64b6e6fd172bdbe34a2f1b7_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
07f10c1cc64b6e6fd172bdbe34a2f1b7_JaffaCakes118
-
Size
9KB
-
MD5
07f10c1cc64b6e6fd172bdbe34a2f1b7
-
SHA1
ea2a19baf9e9f846c4398181b8b76271fc16653c
-
SHA256
c64e3a4575388cf4647a2d3404f3f826f70f362fa4b17cd204cdc360c0605100
-
SHA512
e0ccb15307a4e4c63e8dfb32768ad6cc47c3554923368a072c850c62428e6dcebd76540cf1e0fcae8ad30d4aa667f5907ce2c85bd9a8bf1b5b89ab4a96adcf48
-
SSDEEP
192:f+AwApch467UcCssXtt6HmIefqDFdYwyDUIQZ1xZ85jNpGaY:f+TYch4Ftt6+CDFdYwKcZDa5Bp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07f10c1cc64b6e6fd172bdbe34a2f1b7_JaffaCakes118
Files
-
07f10c1cc64b6e6fd172bdbe34a2f1b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
0a3d19d1710c2f4e80a0292a1b870936
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
FlushFileBuffers
FoldStringW
GetCommModemStatus
GetConsoleCursorInfo
GetEnvironmentStringsW
GetExitCodeThread
GetNumberOfConsoleMouseButtons
GetTempPathA
GetVolumeInformationA
GlobalDeleteAtom
GlobalGetAtomNameA
PeekConsoleInputA
SetSystemPowerState
Sleep
TlsFree
UnlockFile
WriteConsoleOutputAttribute
_llseek
lstrcat
user32
CharToOemW
CreateIconIndirect
DrawEdge
EmptyClipboard
EndDialog
EnumChildWindows
GetClassWord
GetClipboardViewer
GetDoubleClickTime
GetKeyboardLayoutList
GetMessageExtraInfo
GetMonitorInfoA
GetScrollPos
GetWindowTextW
GrayStringA
GrayStringW
OffsetRect
RemoveMenu
SendIMEMessageExA
SetMessageExtraInfo
SetWindowRgn
ToAsciiEx
TrackMouseEvent
UnregisterDeviceNotification
gdi32
CreateBitmapIndirect
CreateICA
CreatePenIndirect
EnumICMProfilesA
ExtFloodFill
GetBitmapBits
GetBrushOrgEx
GetCharABCWidthsW
GetCharWidthW
GetDIBColorTable
GetEnhMetaFileA
GetPixelFormat
GetRasterizerCaps
GetTextExtentPointA
MaskBlt
Pie
PolyBezierTo
Polyline
ResizePalette
RoundRect
ScaleWindowExtEx
SetBkColor
SetColorAdjustment
SetDeviceGammaRamp
SetPixel
UpdateICMRegKeyW
Sections
.text Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ