Static task
static1
Behavioral task
behavioral1
Sample
31d8448ce88f4f1316418a5c4e9ae22d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31d8448ce88f4f1316418a5c4e9ae22d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31d8448ce88f4f1316418a5c4e9ae22d_JaffaCakes118
-
Size
248KB
-
MD5
31d8448ce88f4f1316418a5c4e9ae22d
-
SHA1
c6c66d8ceac775312995d1404a55788404eaa3f9
-
SHA256
b6d3bca355d4aab32b490ca9294a20e37710f61e1f8e4caabc003a129c6dc38a
-
SHA512
cac17d010f50b758fe9d8e450861c8bb6ee4f8a8717b8f6f7b5a8654d656fceb1f0292a7943df1474428734db4bb2d09ac099d945be985b1bc48a7909ee84535
-
SSDEEP
6144:ERtEJoD7zRRr0MD3TCdx9N+gAm1gy0EJH6bEk9TyuxHf:2mJo7Lr0WTCVIgACgy1abP9TyQHf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31d8448ce88f4f1316418a5c4e9ae22d_JaffaCakes118
Files
-
31d8448ce88f4f1316418a5c4e9ae22d_JaffaCakes118.exe windows:4 windows x86 arch:x86
2010d283905f75aded64f127b39058e2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
CharLowerBuffA
OffsetRect
IsDialogMessageW
MessageBeep
RedrawWindow
GetSystemMenu
GetFocus
DrawFrameControl
GetWindowLongA
GetClassInfoA
DestroyMenu
GetClassLongA
GetSysColor
GetMenuItemID
ClientToScreen
GetClassNameA
GetMenuItemCount
SetWindowTextA
SetTimer
GetWindowDC
InsertMenuA
IsWindow
LoadKeyboardLayoutA
GetDC
RemovePropA
CheckMenuItem
FillRect
GetWindowLongW
RemoveMenu
SendMessageA
EndPaint
CreateIcon
GetWindowRect
IsWindowVisible
ShowWindow
DrawTextA
GetWindow
FindWindowA
GetKeyboardLayoutNameA
PostMessageA
GetWindowTextA
OpenClipboard
OemToCharA
TranslateMessage
GetLastActivePopup
ShowScrollBar
IsZoomed
CharNextA
PtInRect
CharToOemA
DrawIcon
DispatchMessageA
GetScrollInfo
AdjustWindowRectEx
DispatchMessageW
EnumWindows
TrackPopupMenu
DestroyWindow
GetKeyboardType
PostQuitMessage
InflateRect
IsWindowEnabled
SetParent
SetRect
IsWindowUnicode
GetScrollPos
MessageBoxA
SystemParametersInfoA
SetCursor
SetWindowPlacement
InsertMenuItemA
MapVirtualKeyA
ActivateKeyboardLayout
DeleteMenu
SetPropA
ChildWindowFromPoint
DefFrameProcA
SetWindowsHookExA
SetMenu
GetMessagePos
SetClipboardData
SetMenuItemInfoA
IsChild
GetTopWindow
BeginPaint
LoadBitmapA
GetMenuStringA
GetKeyboardState
CallNextHookEx
MoveWindow
ScrollWindow
SetWindowLongW
SetScrollInfo
GetParent
DrawMenuBar
SetCapture
GetDesktopWindow
GetCursorPos
GetSysColorBrush
ScreenToClient
SendMessageW
TranslateMDISysAccel
GetMenu
LoadIconA
CharUpperBuffA
IsRectEmpty
SetForegroundWindow
RegisterClipboardFormatA
CreateWindowExA
SetScrollRange
GetWindowThreadProcessId
GetMenuItemInfoA
LoadCursorA
ShowOwnedPopups
RegisterClassA
GetKeyState
CreateMenu
ReleaseDC
SetFocus
SetClassLongA
DefWindowProcA
DestroyIcon
GetKeyboardLayoutList
GetDlgItem
EnableScrollBar
GetCapture
CreatePopupMenu
ole32
CLSIDFromProgID
StringFromIID
CoDisconnectObject
MkParseDisplayName
CoTaskMemFree
CoReleaseMarshalData
kernel32
LoadLibraryExA
LocalAlloc
GlobalAlloc
ExitProcess
ExitThread
VirtualAlloc
GetProcAddress
GetLastError
GetModuleHandleA
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ