Static task
static1
Behavioral task
behavioral1
Sample
17797fe221812d880d8a55f84bf08052_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17797fe221812d880d8a55f84bf08052_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17797fe221812d880d8a55f84bf08052_JaffaCakes118
-
Size
39KB
-
MD5
17797fe221812d880d8a55f84bf08052
-
SHA1
df640d4b540221bc511ad4c2143bf3299bf0f046
-
SHA256
85b5d2009f9cd8c8dfdbc38ea328f312b53a026604ada86d625ccc3c710b94ea
-
SHA512
72bf5bfc235604fb7b7b1493fc4a050cc54aad131644fb7d83f92f40163f2d5ec5344b5172053feff866f5f4dd7fd8dda02cc2bce9d20cd4e26c59a5a057e3b3
-
SSDEEP
384:XWG0xiGIr/RsLuljPRhdDbRHFsW3jovvyFoSDk2mcdV/mpNdins1C0M37eC3wR2:GG0xETZsW8SF/mcd01is1C0M6C3H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17797fe221812d880d8a55f84bf08052_JaffaCakes118
Files
-
17797fe221812d880d8a55f84bf08052_JaffaCakes118.exe windows:1 windows x86 arch:x86
1ec25806783342111202c81c43de1bfa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
ExitProcess
FreeLibrary
GetEnvironmentVariableA
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetVersionExA
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
RtlZeroMemory
SearchPathA
Sleep
WinExec
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA
user32
AppendMenuA
CloseWindow
CreateDialogParamA
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
DispatchMessageA
EnableMenuItem
EnableWindow
EndDialog
GetCursorPos
GetDlgItem
GetMessageA
GetWindowRect
IsDialogMessageA
KillTimer
LoadCursorA
LoadIconA
MessageBoxA
PostMessageA
PostQuitMessage
RegisterClassExA
SendMessageA
SetDlgItemTextA
SetForegroundWindow
SetTimer
SetWindowPos
SetWindowTextA
SystemParametersInfoA
TrackPopupMenu
TranslateMessage
wsprintfA
Sections
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ