W@16
Static task
static1
Behavioral task
behavioral1
Sample
07abecc965588b77c7308d590f11d4d9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07abecc965588b77c7308d590f11d4d9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07abecc965588b77c7308d590f11d4d9_JaffaCakes118
-
Size
174KB
-
MD5
07abecc965588b77c7308d590f11d4d9
-
SHA1
f47147488f3e17003c0b2394fef42af7ae451df6
-
SHA256
9839986fffccec029a4ec9c81eb668a73ed3e647840f7fc2b04c81029cc186d1
-
SHA512
e28c5c6996261926736d3c81e9ccdee6eb430a03d419126db5190aa7326151227afadaf59d7ad0c835d26b88215843153e3be0cb85bec9ea96bef0e5843aac0d
-
SSDEEP
3072:1wNKk+3nr/uTbdj7uz11WtcFZcPNRJ6XtsX7Rssv8yNr7jZ:wKk6n6d7uq+GPjPrRffr7d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07abecc965588b77c7308d590f11d4d9_JaffaCakes118
Files
-
07abecc965588b77c7308d590f11d4d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
406d2cf05a3fc9b033c437100d7500cc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shlwapi
SHQueryInfoKeyA
user32
wsprintfA
DrawEdge
IsWindow
DestroyWindow
CharNextA
DispatchMessageA
DestroyMenu
GetTopWindow
DispatchMessageW
DrawMenuBar
kernel32
VirtualAllocEx
DeleteCriticalSection
ExitProcess
EnterCriticalSection
GetProcessHeap
DeleteFileA
comdlg32
GetFileTitleA
oleaut32
SafeArrayGetUBound
SysFreeString
SysReAllocStringLen
SafeArrayGetElement
OleLoadPicture
GetErrorInfo
SafeArrayUnaccessData
advapi32
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
gdi32
GetDCOrgEx
CreateDIBitmap
version
VerFindFileA
GetFileVersionInfoA
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 145KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tls Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bbs Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ