?_CreateCaret@@YGPAX_KDI@Z
Static task
static1
Behavioral task
behavioral1
Sample
07c91a2c85c574ad2ef4b6c343b26002_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07c91a2c85c574ad2ef4b6c343b26002_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07c91a2c85c574ad2ef4b6c343b26002_JaffaCakes118
-
Size
87KB
-
MD5
07c91a2c85c574ad2ef4b6c343b26002
-
SHA1
da3da1101f9d1daa85087293e2dce0a9daa57b27
-
SHA256
69fbb8ebce4fd4ab5add2bf3bddb9623cecdea58cb29fa503c0502cd369d0763
-
SHA512
99009fa3d7add6fef627958c1e4dbb853cc13fff64dcb384070c25be6c42996e51bc0c552d4e094647aa92b5e93e4282acd6678829fff7d0e0f963343c1f1f85
-
SSDEEP
1536:mo8I0wx8Bm5QekiayNz+cCtlL48AA6GHjZIKDaDCxhHyxmd7NRRLO+3YP:s3m5PFNycCt1IpiZzaDCvCmD7o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07c91a2c85c574ad2ef4b6c343b26002_JaffaCakes118
Files
-
07c91a2c85c574ad2ef4b6c343b26002_JaffaCakes118.exe windows:5 windows x86 arch:x86
dd6367397f88de5fcd2dcf43dea4918d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCmpNIA
PathCanonicalizeA
StrRChrA
ord158
ChrCmpIW
PathFindFileNameW
kernel32
FileTimeToDosDateTime
OpenJobObjectA
GetDllDirectoryW
GlobalFlags
FlushFileBuffers
GetHandleInformation
CreateFileMappingA
TransmitCommChar
GlobalGetAtomNameW
GetCommMask
OpenFileMappingW
lstrcpyA
CopyFileA
GetCommConfig
CreateMailslotA
lstrcatW
LoadLibraryExW
CreateWaitableTimerW
OpenEventA
CreateTapePartition
user32
CallNextHookEx
AttachThreadInput
ChangeMenuA
DefDlgProcW
OpenDesktopA
EnumDisplaySettingsA
SetScrollRange
GetDoubleClickTime
GetMonitorInfoA
SetPropW
GetKeyboardLayoutNameW
SetWindowContextHelpId
GetMenuStringA
CreatePopupMenu
IsDlgButtonChecked
SetWindowTextW
DestroyIcon
SendMessageCallbackA
LoadBitmapA
SetCaretPos
gdi32
Polyline
GetEnhMetaFilePaletteEntries
GetPath
CreateDiscardableBitmap
SetTextAlign
ExtSelectClipRgn
GetTextAlign
GetPaletteEntries
CreateMetaFileA
GetCurrentObject
FixBrushOrgEx
CreateEnhMetaFileW
advapi32
InitializeSecurityDescriptor
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MData Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ICode Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MConst Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NData Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 838B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ