Static task
static1
Behavioral task
behavioral1
Sample
0f921d3c5072fba2a8b849ed0c7c85d2_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f921d3c5072fba2a8b849ed0c7c85d2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f921d3c5072fba2a8b849ed0c7c85d2_JaffaCakes118
-
Size
70KB
-
MD5
0f921d3c5072fba2a8b849ed0c7c85d2
-
SHA1
8b73a0e174ffa34d9aced767f3605c5fbb3e5ca9
-
SHA256
1f32842ce40f8b5f10ad16632b20b65b797211066e2ce312b4858d8d1d0910eb
-
SHA512
0bda5203ae127ebb73eeb91c1e82fc96cce45d266a7a785b59094af7e657d8f32345564901d97e40b23480b896c253c69aa637b774b90fedf492805b54953200
-
SSDEEP
1536:eobrOmpVJBbP6VC7ar7RlqYg66aLfJA2lm8ZAliIfOT:ekrTVJBzIfR3gWLNmEA4V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f921d3c5072fba2a8b849ed0c7c85d2_JaffaCakes118
Files
-
0f921d3c5072fba2a8b849ed0c7c85d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
d9e0325aaf531700f1ac95eb1cb3e0d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetFocus
GetMenu
GetWindowTextA
CopyRect
DrawTextA
InsertMenuA
DialogBoxParamW
GetWindowTextLengthA
CopyIcon
GetDlgItem
LoadMenuA
CreateIcon
DrawIconEx
CloseWindow
IsMenu
IsWindow
DrawTextW
DrawIcon
LoadCursorA
GetDC
CopyImage
GetCursor
kernel32
lstrcpynW
lstrcatA
GetStartupInfoA
GetCurrentProcess
MultiByteToWideChar
SetFilePointer
GetStdHandle
GetStringTypeA
GetCommandLineA
CreateFileA
GetStringTypeW
TerminateProcess
SetHandleCount
GetCPInfo
GetACP
LCMapStringW
WriteFile
GetVersion
GetFileType
lstrcpyA
LCMapStringA
GetOEMCP
comctl32
ImageList_EndDrag
CreateUpDownControl
ImageList_DragEnter
ImageList_LoadImageW
ImageList_DrawEx
ImageList_Create
CreateToolbarEx
ImageList_AddIcon
CreateToolbar
ImageList_Destroy
MenuHelp
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 439B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ