Static task
static1
Behavioral task
behavioral1
Sample
0d662e9e23021bb114efcdd4de0bbb56_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d662e9e23021bb114efcdd4de0bbb56_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d662e9e23021bb114efcdd4de0bbb56_JaffaCakes118
-
Size
307KB
-
MD5
0d662e9e23021bb114efcdd4de0bbb56
-
SHA1
60540004bdf444c4c18778d92f5f51d02479f2be
-
SHA256
9a8f8abcc46823f6fe901b898076395f1b72686f6f590918eb8e27c5ee5dce71
-
SHA512
dafeaa1ee3912d38f4587f3b157717bc273481ac1a1c15fcb97930f261723bf2640f3586f92f51f5d7389e1166cf4e52c3a7cecb78587803039a28f8506b13bd
-
SSDEEP
6144:Ug6UZ/XtCjb53LIT1jx1KgVjJGu96+tnqGaVMiEouzwa:U/Yvm3OjxkgVlVthwu5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d662e9e23021bb114efcdd4de0bbb56_JaffaCakes118
Files
-
0d662e9e23021bb114efcdd4de0bbb56_JaffaCakes118.exe windows:4 windows x86 arch:x86
8a39d3945675eed8461177b123fad56d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
GetCurrentThreadId
InterlockedExchange
GetCurrentProcess
GetLastError
CompareStringW
GetModuleHandleW
GetTickCount
GlobalAddAtomW
FormatMessageW
GlobalDeleteAtom
TerminateProcess
SetUnhandledExceptionFilter
MultiByteToWideChar
VirtualProtect
GlobalFree
GetCommandLineA
GetModuleHandleA
GlobalAlloc
GetStartupInfoA
user32
RemovePropW
SetPropW
KillTimer
CreateWindowExW
SendMessageTimeoutW
SetWinEventHook
GetClassNameW
CreateDialogParamW
LoadImageW
RegisterHotKey
GetDC
ReleaseDC
GetForegroundWindow
UpdateLayeredWindow
IsWindowEnabled
GetCapture
SetRectEmpty
LoadIconW
SendMessageW
SetWindowPos
GetMessagePos
MonitorFromPoint
GetMonitorInfoW
GetDesktopWindow
GetWindowRect
CopyRect
OffsetRect
EqualRect
PtInRect
IsRectEmpty
GetSystemMetrics
GetWindowLongW
LoadStringW
SetForegroundWindow
SetWindowsHookExW
SystemParametersInfoW
GetAsyncKeyState
GetThreadDesktop
PostMessageW
FindWindowW
SetWindowPlacement
EndPaint
RegisterClassExW
GetClientRect
SetWindowLongW
FillRect
DefWindowProcW
UpdateWindow
AdjustWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
InvalidateRect
GetGUIThreadInfo
GetParent
MonitorFromRect
IsIconic
DestroyWindow
IsWindow
UnionRect
ShowWindow
SetTimer
CloseDesktop
LoadCursorW
GetUserObjectInformationW
SetLayeredWindowAttributes
advapi32
TraceMessage
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
gdi32
GetObjectW
DeleteDC
SelectObject
StretchBlt
SetStretchBltMode
CreateCompatibleBitmap
CreateCompatibleDC
MoveToEx
LineTo
CreateSolidBrush
GetStockObject
DeleteObject
ole32
CoCreateInstance
msvcr71
_onexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_amsg_exit
_acmdln
_ismbblead
_XcptFilter
_exit
_c_exit
_vsnwprintf
_cexit
exit
_wcmdln
_initterm
memset
_wcsicmp
_except_handler3
_controlfp
__dllonexit
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ