__GetWindowTextLengthW@12
Static task
static1
Behavioral task
behavioral1
Sample
213d30f05ca1495bd134ae0135a8b8b3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
213d30f05ca1495bd134ae0135a8b8b3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
213d30f05ca1495bd134ae0135a8b8b3_JaffaCakes118
-
Size
148KB
-
MD5
213d30f05ca1495bd134ae0135a8b8b3
-
SHA1
946b9b10fae3084cd7a6ebe5a23ccc24382e6717
-
SHA256
ce1a3e0e312c50f0d7f5244bb1cebca0bb8103e1294216505811489b89df330c
-
SHA512
76c52e43cf07efab580d6e68937e5b4e464d94c75c68a10cbcd2bfa27f0bf1939b2f1d300dd421cef420aac495afa5c87335ef86c45322097d3279f497c81ba0
-
SSDEEP
3072:iMjqP/e621/7FkOc6Mc339R9B2j4qotlAltter2rlXAUBdy+BTH:a/D2lFkOcE3rM4vup0uCWy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 213d30f05ca1495bd134ae0135a8b8b3_JaffaCakes118
Files
-
213d30f05ca1495bd134ae0135a8b8b3_JaffaCakes118.exe windows:5 windows x86 arch:x86
866a668718dd55b5ee5935edecd61d91
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ChrCmpIA
PathUndecorateA
StrPBrkA
StrFormatKBSizeW
PathCompactPathW
shell32
ord147
kernel32
lstrcmpA
SetEndOfFile
GetCommProperties
GetSystemPowerStatus
FileTimeToDosDateTime
DeleteTimerQueue
CloseHandle
GetProfileSectionW
GetCommandLineW
CreateMutexA
QueueUserAPC
QueryDosDeviceA
LoadLibraryExW
lstrcpyW
OpenSemaphoreW
OpenMutexW
GetNamedPipeInfo
LoadLibraryW
LockFileEx
user32
RedrawWindow
GetDlgItem
EnableMenuItem
GetClassNameW
PeekMessageW
ChangeDisplaySettingsExA
SetSysColors
GetDC
GetIconInfo
wsprintfW
DrawTextExW
WaitForInputIdle
RemovePropA
LoadCursorW
KillTimer
GetWindowDC
LoadMenuIndirectA
GetWindowTextLengthW
UnloadKeyboardLayout
GetRawInputDeviceInfoW
GetMenuStringA
IsDlgButtonChecked
WindowFromDC
CreateCaret
ClipCursor
DispatchMessageA
GetMenuInfo
GetSystemMetrics
IsWindowVisible
SetCaretPos
SendMessageW
SetScrollInfo
GetScrollPos
GetMessageTime
TabbedTextOutW
UpdateWindow
GetWindow
GetMenuContextHelpId
gdi32
DPtoLP
GetEnhMetaFileDescriptionA
Chord
SetPolyFillMode
GetPolyFillMode
CreateCompatibleBitmap
EndPath
SetBrushOrgEx
GetDeviceCaps
GetTextMetricsW
GetTextExtentPoint32W
SetLayout
SetTextJustification
GetCharABCWidthsA
ResizePalette
advapi32
IsValidAcl
AddAccessDeniedAce
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.image Size: 1024B - Virtual size: 597B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.memo0 Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_mem Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.datse Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ