Static task
static1
Behavioral task
behavioral1
Sample
04ead902b03b2847205d56dc33f8ee3a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
04ead902b03b2847205d56dc33f8ee3a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
04ead902b03b2847205d56dc33f8ee3a_JaffaCakes118
-
Size
86KB
-
MD5
04ead902b03b2847205d56dc33f8ee3a
-
SHA1
252a34733720985958f41e08c20581de96cb926c
-
SHA256
c95f054dccafde3554e9679510a4df9f26b012d66cb659e2b26719b9a1c65711
-
SHA512
da876c26bef1199e1ded8465cc3aff41a94eedd5adbb83c8d33366fd34e34862b6306436f3c0870dc96219a34a0fbe851a4fab989c1891439c27550adc1e10d3
-
SSDEEP
1536:baalIAQ4juQVFwUVOxsAD8GXN+I7fJ+aCl1few:baaSAQ4bnwbrzoI7h+aS1Gw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04ead902b03b2847205d56dc33f8ee3a_JaffaCakes118
Files
-
04ead902b03b2847205d56dc33f8ee3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
43be982d228655ce75b4e3a419f89ef0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetTextColor
CreateFontIndirectA
GetObjectA
GetStockObject
LineTo
MoveToEx
SelectObject
SetBkColor
CreateFontA
TextOutA
user32
GetWindowLongA
SendMessageA
SetCursor
SetWindowLongA
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow
MessageBoxA
LoadIconA
LoadCursorA
LoadBitmapA
GetWindowRect
PostQuitMessage
GetSysColor
GetMessageA
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
EndDialog
DispatchMessageA
DialogBoxParamA
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CallWindowProcA
BeginPaint
AppendMenuA
MoveWindow
RegisterClassExA
kernel32
lstrcpyA
lstrcatA
WriteFile
UnmapViewOfFile
SetFilePointer
SetFileAttributesA
MapViewOfFile
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetModuleHandleA
GetFileAttributesA
ExitProcess
DeleteFileA
CreateFileMappingA
CreateFileA
CopyFileA
CloseHandle
comdlg32
GetOpenFileNameA
shell32
ShellExecuteA
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE