Static task
static1
Behavioral task
behavioral1
Sample
1750e7ec5456b9ccebacf779f80d695a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1750e7ec5456b9ccebacf779f80d695a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1750e7ec5456b9ccebacf779f80d695a_JaffaCakes118
-
Size
164KB
-
MD5
1750e7ec5456b9ccebacf779f80d695a
-
SHA1
4752a4fcfdd867570ea7aad4cc0ec9b50f48b80a
-
SHA256
b949e1a6e72381ede7e3df508c8a0cba61f01ca3258e061479f1a864bab80d7c
-
SHA512
27f56f93f95aae80d27a198ac33d87e9da0d17de86e0d16d0195a108565a034554ad9d5470ca9b767bb0a9cd2890e0afa1285131407d941842c7954d05a9d7b7
-
SSDEEP
3072:IG00UjAE1D3zh4HJOWd4mOhvOWkBY3oBNBdUAjYuBjyjrj+a2k:7Y/0Hj2mwONB5BNoA7uSa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1750e7ec5456b9ccebacf779f80d695a_JaffaCakes118
Files
-
1750e7ec5456b9ccebacf779f80d695a_JaffaCakes118.exe windows:4 windows x86 arch:x86
edfc685350a580ecefd1567664bd7022
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
WaitCommEvent
GlobalLock
GetModuleFileNameA
ReadFile
WaitCommEvent
GetTickCount
GetVersionExA
LocalFree
GetCurrentThreadId
EnumResourceNamesW
LocalAlloc
CloseHandle
GlobalAlloc
ExitProcess
GetSystemTimeAsFileTime
ExitProcess
GetFullPathNameW
GetCurrentProcessId
CreateFileW
DisableThreadLibraryCalls
GlobalUnlock
comctl32
ImageList_DragLeave
ImageList_DragMove
ImageList_DragEnter
gdi32
CreatePen
SetStretchBltMode
LineTo
CreateCompatibleDC
SelectObject
GetObjectType
DeleteDC
StretchBlt
BitBlt
CreateDIBSection
CreateDCW
CreateBitmap
msimg32
AlphaBlend
TransparentBlt
ole32
CoFreeUnusedLibraries
StringFromGUID2
CoUninitialize
CoInitialize
CoCreateInstance
advapi32
RegQueryValueExW
RegDeleteKeyW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueW
RegCreateKeyW
RegEnumKeyExW
winmm
timeGetTime
user32
EnableWindow
IsWindow
CreatePopupMenu
ClipCursor
FindWindowA
SetParent
TrackPopupMenuEx
DestroyMenu
GetDesktopWindow
RedrawWindow
GetFocus
SetWindowPos
InvalidateRect
SetCursor
LoadCursorW
PtInRect
gdiplus
GdipGetImagePixelFormat
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipDisposeImage
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsr Size: 512B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ