Static task
static1
Behavioral task
behavioral1
Sample
0360132f9e9eb8bdef4d5701eafda90d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0360132f9e9eb8bdef4d5701eafda90d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0360132f9e9eb8bdef4d5701eafda90d_JaffaCakes118
-
Size
74KB
-
MD5
0360132f9e9eb8bdef4d5701eafda90d
-
SHA1
5055ed0df2e6f22dba50cb8e37783743da11a119
-
SHA256
d36213588969dd81c9ac977670228fb9e12bbe02228ea3869081b2d3341dc71d
-
SHA512
a462ed5837e0a9f6b1dc3e2f2e5b3503502e2de7425645ba70301f0cb7439927bbc13d454595e10cb35c776d4b6ab5947e97117b64f5700825e24caaf954f2a8
-
SSDEEP
1536:BO04IrfTTSUo3A1HQtmVyZK49iFstepVLtE2tPXVAHmR/PO:BOCziA4mVyZK48FTLthQHmlO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0360132f9e9eb8bdef4d5701eafda90d_JaffaCakes118
Files
-
0360132f9e9eb8bdef4d5701eafda90d_JaffaCakes118.exe windows:1 windows x86 arch:x86
c357cea54ce73a28eed56b70ff043b00
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
BitBlt
CreateCompatibleDC
CreateDIBitmap
CreateFontA
CreatePalette
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
GetStockObject
LineTo
MoveToEx
RealizePalette
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetTextColor
user32
BeginPaint
CheckMenuItem
CreateDialogParamA
CreateWindowExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
DispatchMessageA
DrawTextA
EndDialog
EndPaint
FillRect
GetClientRect
GetDC
GetDlgItemTextA
GetMenu
GetMessageA
GetSysColor
GetSystemMetrics
GetWindowRect
InvalidateRect
IsDialogMessageA
IsIconic
KillTimer
LoadAcceleratorsA
LoadBitmapA
LoadCursorA
LoadIconA
MessageBeep
MessageBoxA
MoveWindow
PostQuitMessage
RegisterClassA
SetDlgItemTextA
SetFocus
SetTimer
ShowWindow
TranslateAcceleratorA
TranslateMessage
UpdateWindow
kernel32
ExitProcess
GetCommandLineA
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalFree
Sleep
_lclose
_lcreat
_lopen
_lread
_lwrite
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE