?_MapWindowPoints@@YGPAXPAKPAEPAI@Z
Static task
static1
Behavioral task
behavioral1
Sample
0780858ddfbd45e3b77d57ad604ec723_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0780858ddfbd45e3b77d57ad604ec723_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0780858ddfbd45e3b77d57ad604ec723_JaffaCakes118
-
Size
150KB
-
MD5
0780858ddfbd45e3b77d57ad604ec723
-
SHA1
572615f16f344aa859fb1643f781e414f613399c
-
SHA256
9608c3ef4eef2e648c80db0937a1f1b993dc97bdc94042936084ff7dd8badb41
-
SHA512
70216e54643ddf244d4b2327eb61489ad4ab1b89da29403e8247d44867fcf34ef9928085bd0e53875e3df5b46c8a8ce7c23c521528f2e84c20b608c22c277aa5
-
SSDEEP
3072:/3zv4GoOjZM1izCzxMYxOVGQFrroqraUciSV3Hi11Ri73vNegB7sIF/zPahq73KE:/jgOZJ+zxMY8Vtro6aUFG3Hili5eg15T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0780858ddfbd45e3b77d57ad604ec723_JaffaCakes118
Files
-
0780858ddfbd45e3b77d57ad604ec723_JaffaCakes118.exe windows:5 windows x86 arch:x86
5127e8e86608bcb935a40bcf5c45803d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathMakePrettyA
StrCmpNIW
PathCompactPathW
StrTrimW
StrRStrIW
StrCpyNW
ord158
PathFindNextComponentW
ChrCmpIW
kernel32
CancelWaitableTimer
OpenSemaphoreA
lstrcmpiA
LoadLibraryExW
MoveFileExW
GetModuleFileNameW
GetTapeParameters
FileTimeToDosDateTime
SetMailslotInfo
GetCommModemStatus
SetInformationJobObject
GlobalCompact
IsBadReadPtr
SetMessageWaitingIndicator
SetTapePosition
LoadLibraryA
GetModuleHandleExA
SetupComm
user32
DrawIcon
InvalidateRgn
PostMessageW
LoadImageW
CloseClipboard
EnumDesktopWindows
GetClientRect
SetWinEventHook
SetRect
GetWindowTextW
EnableMenuItem
GetSysColor
MessageBoxW
SystemParametersInfoA
MapWindowPoints
GetDlgCtrlID
CreateCursor
GetPropW
gdi32
PlayEnhMetaFileRecord
SetArcDirection
SetBkColor
GetEnhMetaFileBits
GetRandomRgn
GetTextExtentExPointW
CreateFontIndirectA
GetDeviceCaps
CreateEnhMetaFileA
CreatePolyPolygonRgn
SetViewportExtEx
msvcrt
memset
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.icode Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m_data Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.n_data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 986B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ