Static task
static1
Behavioral task
behavioral1
Sample
166da263d55d3a06b0bac738ceea769a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
166da263d55d3a06b0bac738ceea769a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
166da263d55d3a06b0bac738ceea769a_JaffaCakes118
-
Size
44KB
-
MD5
166da263d55d3a06b0bac738ceea769a
-
SHA1
b6fea0733f74ad31d916cf7b220108348ce919ef
-
SHA256
b7258bdeb2bdbd6cf69e4829aa4c71f00e7d1f087b28c624eb8f295fc32f1994
-
SHA512
13056935c8c8d274a56cf20a9b26cd0bc073088a3888469e75703eaff3d3b45409d80527f89007da88a44fbbe849fa9895cd401a6758c37bbbb4184f71af9214
-
SSDEEP
768:OLbCpMEzvf+FBCsUxwFS0KAD4Big+9cjR/cfqGELeeTyMuYBIgj:skf+FkoF/KArZ9cj3BtyMOgj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 166da263d55d3a06b0bac738ceea769a_JaffaCakes118
Files
-
166da263d55d3a06b0bac738ceea769a_JaffaCakes118.exe windows:4 windows x86 arch:x86
525ebf51ad968ac1767f7d2de66d4422
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassNameA
FindWindowExA
CharUpperBuffA
GetWindowLongA
GetDC
GetForegroundWindow
GetClientRect
SendMessageA
MessageBoxA
kernel32
lstrlenA
CreateThread
CreateFileA
GetVersionExA
lstrcpyA
ReadFile
VirtualAlloc
GetFileTime
GetLastError
GetModuleHandleA
GetTickCount
DeleteFileA
lstrcmpiA
GetLocaleInfoA
TerminateThread
VirtualFree
SetEndOfFile
SetFilePointer
CloseHandle
WideCharToMultiByte
GetProcAddress
WriteFile
ExitProcess
LoadLibraryA
lstrcatA
GetFileSize
lstrlenW
lstrcmpA
Sleep
gdi32
GetPixel
CreateCompatibleDC
SelectObject
DeleteDC
BitBlt
CreateDCA
DeleteObject
CreateDIBSection
GetDIBits
SetPixel
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_INIT_ Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE