?szzxbj_aqQAP@@YGKJ@Z
Static task
static1
Behavioral task
behavioral1
Sample
217ce552f5074d8fa89c9a3f5db351a3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
217ce552f5074d8fa89c9a3f5db351a3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
217ce552f5074d8fa89c9a3f5db351a3_JaffaCakes118
-
Size
42KB
-
MD5
217ce552f5074d8fa89c9a3f5db351a3
-
SHA1
54d477d36d3c379cdf7ca08cd1cebe9a85878fad
-
SHA256
44c7c13cb6d277f2f63dcb93db7dae06c2eab2bdf72eccd383bfe8a00f4d5956
-
SHA512
787773af21866d7b4d35c37b3f7d0b96ec2b6a7fe991f5ba5c8a13cddf6c04e84c918f004c473566e5d8a03ab1627ad0f01b2a21fe634912aa19cb98c77da1c6
-
SSDEEP
768:57KB0W+cGRmCdg2T0aYfwWA54ZwDNTerHibGzYzvIUd:5GB0WawCdg2TOs4ZaNTeLGGS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 217ce552f5074d8fa89c9a3f5db351a3_JaffaCakes118
Files
-
217ce552f5074d8fa89c9a3f5db351a3_JaffaCakes118.exe windows:5 windows x86 arch:x86
db94adc3191e4bbb46642c475de10c75
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
Polygon
SetViewportExtEx
GetROP2
GetTextFaceW
GetTextAlign
LineTo
GetTextExtentPoint32W
CreateDiscardableBitmap
PathToRegion
RealizePalette
CreatePen
GetTextColor
BeginPath
user32
GetDlgCtrlID
SetCursor
DestroyCursor
EndDialog
DrawFrameControl
SetDlgItemInt
GetKeyboardType
WindowFromPoint
GetForegroundWindow
GetClassInfoA
LoadStringW
wsprintfW
InvalidateRect
TranslateAcceleratorA
GetWindowLongA
TabbedTextOutW
GetKeyState
DrawTextExW
GetWindowPlacement
MapVirtualKeyExW
MessageBoxExW
GetClassLongA
ValidateRect
IsCharLowerA
GetSystemMenu
LoadIconA
SetWindowPlacement
LoadMenuA
InsertMenuA
kernel32
GetModuleHandleA
GetTimeZoneInformation
TlsSetValue
lstrcatA
CreateNamedPipeA
LocalSize
lstrlenW
GetThreadContext
SetThreadExecutionState
GetSystemDirectoryA
HeapSize
SetFileAttributesA
lstrcpyA
WaitForDebugEvent
VerifyVersionInfoW
GetFileAttributesExA
GlobalReAlloc
GetCurrentProcessId
GetFileSize
shlwapi
StrSpnW
StrCmpW
UrlGetPartW
ColorRGBToHLS
ntdll
memset
Exports
Exports
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ