Static task
static1
Behavioral task
behavioral1
Sample
36023b8ca11db0deb06018ae74a003f2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36023b8ca11db0deb06018ae74a003f2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36023b8ca11db0deb06018ae74a003f2_JaffaCakes118
-
Size
27KB
-
MD5
36023b8ca11db0deb06018ae74a003f2
-
SHA1
421368d38dbfb050a260e630a0479fab85cbede5
-
SHA256
a498b4be6f4eabdac610e00534673839035fbe95f08503a0db2c3d698b823479
-
SHA512
abe42a06d4f2a0eff575858560308e4dec817937ac893cfca5c0b4b46a56da0c048f16837b28165b163091e071ccdd6d1ffc407645274cfa66d2d8f1205f2b66
-
SSDEEP
384:l9Lx3GpHRTLSF3EyZAOt9252lCnM/lGakpe9NXDUDM1qjW7PykJPB:z89SF39RtE52kelBfPXQMHqkJPB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36023b8ca11db0deb06018ae74a003f2_JaffaCakes118
Files
-
36023b8ca11db0deb06018ae74a003f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
525a7adc97148f69e263cbcfc81e9c62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextA
CreateIcon
GetDlgItem
GetMenu
GetDC
CloseWindow
DrawIconEx
DialogBoxParamA
CopyImage
CopyIcon
CopyRect
GetCursor
DrawIcon
InsertMenuA
LoadCursorA
DialogBoxParamW
LoadMenuA
DrawTextW
GetWindowTextLengthA
GetFocus
EndDialog
IsMenu
IsWindow
kernel32
GetStartupInfoA
GetCPInfo
GetStringTypeW
SetFilePointer
MultiByteToWideChar
WriteFile
GetVersion
LCMapStringW
lstrcpynA
GetStdHandle
TerminateProcess
GetCommandLineA
GetACP
GetModuleFileNameA
GetFileType
CreateFileA
GetStringTypeA
SetHandleCount
lstrcatA
GetOEMCP
lstrcpynW
GetCurrentProcess
lstrcpyA
LCMapStringA
comctl32
MenuHelp
CreateStatusWindowW
ImageList_GetIconSize
ImageList_Create
ImageList_GetIcon
CreateToolbar
ImageList_DragEnter
ImageList_AddIcon
CreateToolbarEx
ImageList_Add
CreateStatusWindow
ImageList_LoadImageW
CreateUpDownControl
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ