Static task
static1
Behavioral task
behavioral1
Sample
181cd8330bbae815ddafb46bc19a2f54_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
181cd8330bbae815ddafb46bc19a2f54_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
181cd8330bbae815ddafb46bc19a2f54_JaffaCakes118
-
Size
168KB
-
MD5
181cd8330bbae815ddafb46bc19a2f54
-
SHA1
41c4ee83c9259dd3932e51e6b6013f1628a73550
-
SHA256
48b448a4fb34496e09a1f76cb38f6dfa6f867c97d9096a8d95ac64446f17c764
-
SHA512
e7291f0608ad7e14bfe6e80947db2f38ee4d9d71f8bbc083d7c52bbe77a71d8c24cb8cce2dc111d8c2f7d1164540c4ea4f24c246262a9d7042f8d1d81afb06d1
-
SSDEEP
1536:RuXICS4ANKsgttBlJcnAqGkYRVt7EIjUFsRKbrbZywhJKTizjCw0wTtQapxGHYPZ:/ocAqGkahhysRYuiSwX2qYHSN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 181cd8330bbae815ddafb46bc19a2f54_JaffaCakes118
Files
-
181cd8330bbae815ddafb46bc19a2f54_JaffaCakes118.exe windows:4 windows x86 arch:x86
48f71aa6ff3ee053f742deed6bc9d534
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetDlgItemTextA
SetCursor
SendMessageA
SendDlgItemMessageA
SetWindowLongA
MessageBoxA
MessageBeep
MapWindowPoints
LoadIconA
PtInRect
LoadCursorA
GetWindowRect
GetDlgItemTextA
GetDlgItem
EndDialog
EnableWindow
DialogBoxParamA
wsprintfA
kernel32
lstrlenA
lstrcpyA
lstrcatA
WriteFile
TerminateProcess
SizeofResource
SetThreadPriority
RtlZeroMemory
LockResource
LoadResource
CloseHandle
CreateFileA
CreateThread
ExitProcess
FindResourceA
GetModuleHandleA
GetTempPathA
shell32
ShellExecuteA
gdi32
SetTextColor
SetBkMode
CreateFontIndirectA
comctl32
InitCommonControls
comdlg32
GetSaveFileNameA
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ