Static task
static1
Behavioral task
behavioral1
Sample
237170f869c7094a89a5bd273a04984b_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
237170f869c7094a89a5bd273a04984b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
237170f869c7094a89a5bd273a04984b_JaffaCakes118
-
Size
29KB
-
MD5
237170f869c7094a89a5bd273a04984b
-
SHA1
f788f60d3cb9859aaa01a1664ac95358df0e56f5
-
SHA256
63d026926974c044c91e28ce166c859bd7bcd46864b304704d8c0b85117e4a9e
-
SHA512
a70ad25680673078f1f8af74c2ae56d1c7498c64c83f153fab8cb13eb12f0ced596c98f7cb16e57e33695d12222a83313d0161f5e63f08b903fa6a8b00ce82b6
-
SSDEEP
768:ZGN1+aZS7RTIMw6ct1Ip9aiSic9TYTP2Q/:ZGDhZOx5dct1IpO9TE/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 237170f869c7094a89a5bd273a04984b_JaffaCakes118
Files
-
237170f869c7094a89a5bd273a04984b_JaffaCakes118.exe windows:4 windows x86 arch:x86
9f1367290eadf39bd35be7ff9ca70b6e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateMutexA
ExitProcess
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetPriorityClass
GetProcAddress
LoadLibraryA
OpenProcess
SetPriorityClass
VirtualAlloc
VirtualFree
VirtualProtect
lstrcpyA
lstrlenA
user32
CheckDlgButton
CheckRadioButton
CreateDialogParamA
CreatePopupMenu
DestroyMenu
DestroyWindow
DispatchMessageA
GetCursorPos
GetForegroundWindow
GetMessageA
GetSystemMenu
GetSystemMetrics
GetWindowRect
GetWindowThreadProcessId
InsertMenuItemA
IsDialogMessageA
IsDlgButtonChecked
KillTimer
LoadIconA
MessageBoxA
PostQuitMessage
RegisterHotKey
SendDlgItemMessageA
SendMessageA
SendNotifyMessageA
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetMenuItemInfoA
SetTimer
SetWindowPos
ShowWindow
TrackPopupMenu
TranslateMessage
UnregisterHotKey
UpdateWindow
shell32
Shell_NotifyIconA
advapi32
RegCloseKey
RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
imm32
ImmAssociateContext
ImmGetCompositionStringW
ImmGetCompositionWindow
ImmGetContext
ImmNotifyIME
ImmReleaseContext
ImmSetCompositionWindow
Sections
.text Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE