__GetWindowTextLengthW@12
Static task
static1
Behavioral task
behavioral1
Sample
3586b42ee183e7b5a61a108f8f82cff7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3586b42ee183e7b5a61a108f8f82cff7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3586b42ee183e7b5a61a108f8f82cff7_JaffaCakes118
-
Size
149KB
-
MD5
3586b42ee183e7b5a61a108f8f82cff7
-
SHA1
c7d75875f0c274a47c0aa2d625e327937041c515
-
SHA256
e95e8f212fadc910551156da5af447a16c8be3138d5f05f3f4b914cac8c4f5de
-
SHA512
abb4f215664ac956b787c50ecfe960a678b1f6f33b186ab0f26637a0f02ad204b806f0131f132aaf8ab5fceaec93dcc0826f63843e3c9fb558a5c21a5fc86aae
-
SSDEEP
3072:PoiiDB9XbQWbEjJznHCzJIyydkAtR3PeY7Z5+zKLGOV2DJ:a/bLWJzHCRyDv/2KLm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3586b42ee183e7b5a61a108f8f82cff7_JaffaCakes118
Files
-
3586b42ee183e7b5a61a108f8f82cff7_JaffaCakes118.exe windows:5 windows x86 arch:x86
70f7b08378408bbe20348a5910f418d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ChrCmpIA
PathUndecorateA
StrPBrkA
StrFormatKBSizeW
PathCompactPathW
shell32
ord147
kernel32
lstrcmpA
SetEndOfFile
GetCommProperties
GetSystemPowerStatus
FileTimeToDosDateTime
DeleteTimerQueue
CloseHandle
GetProfileSectionW
GetCommandLineW
QueryDosDeviceW
QueueUserAPC
LoadLibraryExW
CreateMutexW
lstrcpyW
OpenSemaphoreW
OpenMutexW
GetNamedPipeInfo
LoadLibraryW
LockFileEx
user32
EnableMenuItem
GetClassNameW
PeekMessageW
MessageBoxA
DrawFocusRect
GetDC
GetIconInfo
DrawTextExW
GetClientRect
LoadMenuIndirectW
GetMenuStringW
RemovePropA
GetClipCursor
LoadCursorW
KillTimer
ChangeDisplaySettingsExW
GetMessageExtraInfo
GetWindowDC
RemovePropW
ClientToScreen
GetDlgItem
ScrollWindow
DefWindowProcA
IsDlgButtonChecked
WindowFromDC
CreateCaret
ClipCursor
GetMenuInfo
GetSystemMetrics
IsWindowVisible
LoadKeyboardLayoutA
SetScrollInfo
GetScrollPos
GetKeyboardLayoutNameA
DispatchMessageW
TabbedTextOutW
UpdateWindow
GetWindow
SendMessageTimeoutA
gdi32
DPtoLP
GetEnhMetaFileDescriptionA
Chord
SetPolyFillMode
GetPolyFillMode
CreateCompatibleBitmap
EndPath
SetBrushOrgEx
GetDeviceCaps
GetTextMetricsW
GetTextExtentPoint32W
SetLayout
SetTextJustification
GetCharABCWidthsA
ResizePalette
advapi32
IsValidAcl
AddAccessDeniedAce
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.image Size: 1024B - Virtual size: 597B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.memo0 Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_mem Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.datse Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ