Static task
static1
Behavioral task
behavioral1
Sample
1014bbd8c736364d1ff2b57043c14e66_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
1014bbd8c736364d1ff2b57043c14e66_JaffaCakes118
-
Size
205KB
-
MD5
1014bbd8c736364d1ff2b57043c14e66
-
SHA1
c621dc039f540a34185ee1138b0f07adbdc99c17
-
SHA256
f6d1c78dde96c7538e35fbd7d2415075b418c68571909e66a3bb9d2203bb3d2c
-
SHA512
856ba02f14c6dc1002177f43cbd52314e3d00b253bb530b7716fe7a150edac57f7b3ed05b1d8ef322da90d34ccc8aad2ad17427137603fda01e985efcefb975c
-
SSDEEP
3072:dPy6ILX2CCE8Q5c6D8HFZqTTeTTTfqTTTJTTTTTnTTTTTThqTTTTTTfLTTTTTTTq:ddI/P8Q5c6QHFZlxwijwvhkW5asz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1014bbd8c736364d1ff2b57043c14e66_JaffaCakes118
Files
-
1014bbd8c736364d1ff2b57043c14e66_JaffaCakes118.exe windows:4 windows x86 arch:x86
98cb53f58e2843e337cfb450b38ad00f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
WaitForSingleObject
Sleep
MultiByteToWideChar
GetModuleHandleA
GetProcAddress
OpenProcess
CreateProcessA
GetModuleFileNameA
CloseHandle
GetStartupInfoA
user32
GetWindowPlacement
SetWindowTextA
GetDesktopWindow
CopyRect
OffsetRect
GetWindowTextA
GetClientRect
GetDC
DrawTextA
GetWindowRect
GetWindowThreadProcessId
SetWindowPos
ReleaseDC
GetDlgItem
SystemParametersInfoA
LoadIconA
SendMessageA
SetTimer
SendDlgItemMessageA
EndDialog
DialogBoxParamA
FindWindowA
gdi32
SelectObject
CreateFontIndirectA
DeleteObject
wsock32
ntohl
advapi32
OpenProcessToken
comctl32
InitCommonControlsEx
shell32
ShellExecuteA
msvcrt
_controlfp
_write
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
_read
_close
_fstat
_stat
__dllonexit
_fdopen
_stricmp
_except_handler3
_errno
strrchr
_access
vfprintf
remove
_chmod
_snprintf
_mkdir
_purecall
free
??3@YAXPAX@Z
malloc
strlen
_beginthreadex
atoi
fprintf
_iob
fopen
fclose
strcpy
_chdir
_putenv
??2@YAPAXI@Z
strcmp
__p___argc
__p___argv
memcmp
_open
fwrite
memset
_ftol
fseek
fread
memcpy
exit
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rrdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE