Static task
static1
Behavioral task
behavioral1
Sample
253bc7570edd9cd8430f2a567587e97c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
253bc7570edd9cd8430f2a567587e97c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
253bc7570edd9cd8430f2a567587e97c_JaffaCakes118
-
Size
268KB
-
MD5
253bc7570edd9cd8430f2a567587e97c
-
SHA1
0bbcb8def93da0e36fe744ec9ed002252b2462c5
-
SHA256
3a34c894f7f6a0ee2f7a45d62f8048998797b274070e44523648998692ae9e1b
-
SHA512
e7f88292f24e65feacaba534cb527b2b60997feb95f18f2b1b85e7ec9cfc7114ad9fca29413420d8480069bd9e7e8161515b905745e755f2348c03a5ed2e8543
-
SSDEEP
6144:KVMn0bLh/oxETOdPBCgjYyon/Qzka6c60:KfbF/o3Igkyuab60
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 253bc7570edd9cd8430f2a567587e97c_JaffaCakes118
Files
-
253bc7570edd9cd8430f2a567587e97c_JaffaCakes118.exe windows:4 windows x86 arch:x86
9049e72447c443bb9275eacd12668124
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysAllocStringLen
SysFreeString
VariantCopyInd
SafeArrayUnaccessData
SysReAllocStringLen
VariantChangeType
OleLoadPicture
GetErrorInfo
SafeArrayCreate
version
GetFileVersionInfoA
shell32
SHGetSpecialFolderLocation
SHGetFolderPathA
user32
ShowOwnedPopups
CharLowerBuffA
UnhookWindowsHookEx
TranslateMessage
IsChild
RegisterClipboardFormatA
GetCursor
WindowFromPoint
MsgWaitForMultipleObjects
SetMenuItemInfoA
GetWindowPlacement
GetScrollPos
SetParent
GetLastActivePopup
GetMessagePos
InflateRect
RemovePropA
GetKeyboardLayoutNameA
BeginPaint
GetMenuStringA
SetWindowLongA
EqualRect
DeleteMenu
GetClientRect
GetSysColorBrush
CreateMenu
IsWindow
GetSystemMenu
GetMenuItemCount
CloseClipboard
SetWindowTextA
GetFocus
RegisterClassA
CheckMenuItem
CallNextHookEx
LoadBitmapA
SendMessageW
GetActiveWindow
DestroyWindow
CharNextA
SetCursor
GetDCEx
MapVirtualKeyA
DrawEdge
GetClassNameA
DrawIconEx
PostQuitMessage
GetKeyboardLayout
DispatchMessageA
KillTimer
SendMessageA
CreatePopupMenu
GetWindowDC
DrawMenuBar
LoadStringA
SetForegroundWindow
CreateWindowExA
GetMenuItemID
CharLowerA
ClientToScreen
SetWindowPos
RegisterWindowMessageA
ShowScrollBar
DrawTextA
GetKeyboardState
EnumChildWindows
EnumThreadWindows
LoadCursorA
FindWindowA
GetWindowLongW
PtInRect
WaitMessage
SystemParametersInfoA
CharUpperBuffA
IsDialogMessageA
LoadKeyboardLayoutA
ScreenToClient
CharToOemA
SetWindowLongW
SetWindowPlacement
DestroyCursor
PostMessageA
ReleaseCapture
SetClipboardData
EmptyClipboard
GetClipboardData
OemToCharA
EndPaint
GetSysColor
EnableScrollBar
IsWindowEnabled
InsertMenuA
IsWindowUnicode
SetClassLongA
CreateIcon
GetScrollInfo
IsWindowVisible
SetWindowsHookExA
RemoveMenu
GetKeyNameTextA
GetParent
DrawFrameControl
ScrollWindow
GetWindow
MapWindowPoints
InvalidateRect
DestroyIcon
GetForegroundWindow
FillRect
OffsetRect
GetWindowRect
GetMenu
OpenClipboard
ActivateKeyboardLayout
CallWindowProcA
CharNextW
AdjustWindowRectEx
DefWindowProcA
SetPropA
IsDialogMessageW
DispatchMessageW
wsprintfA
DrawAnimatedRects
LoadIconA
GetIconInfo
SetCapture
SetScrollInfo
GetSubMenu
kernel32
LoadLibraryExA
GetACP
lstrlenA
GetLastError
GetModuleHandleW
GetProcAddress
ExitProcess
VirtualAllocEx
LoadLibraryA
LocalAlloc
ExitThread
GetCommandLineA
GetModuleHandleA
IsBadReadPtr
msvcrt
mbstowcs
atol
Sections
.text Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 589B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ