Static task
static1
Behavioral task
behavioral1
Sample
36f208825e3c130688100b870bf1d6e7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36f208825e3c130688100b870bf1d6e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36f208825e3c130688100b870bf1d6e7_JaffaCakes118
-
Size
88KB
-
MD5
36f208825e3c130688100b870bf1d6e7
-
SHA1
b56a87d8a725fbd5d4885dbecbd2dd4fb6dad42e
-
SHA256
95840d9d64d8277ba7617d30f64c5d48b58303cf6f85a589e8bcabcd278977ec
-
SHA512
baa96b690a19c385b094129c3bd109bd4f021cfbeb6caa1cbce3ff1b60f56bfb2f6d8151dc14e251d00ecd6dd475fdfba0b914531f01ba25f33a1a9b5d034ace
-
SSDEEP
1536:cH1JTTU8QY1JpqhDcEfJEXuXS/ZMd0s63eC7wLA79yOhtUj/z/+QoeulWXW3IRXM:cvTTzQ1hDcExEiS/Za05XP9ynjL/kN+y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36f208825e3c130688100b870bf1d6e7_JaffaCakes118
Files
-
36f208825e3c130688100b870bf1d6e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
8fba4ddcb248a65db63666555a1c9dbb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorA
ChooseColorW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
dwOKSubclass
WantArrows
GetOpenFileNameA
GetOpenFileNameW
LoadAlterBitmap
PrintDlgA
ReplaceTextW
user32
DialogBoxParamA
EnumWindows
GetDesktopWindow
GetUserObjectSecurity
ScreenToClient
SendMessageA
kernel32
HeapCreate
GetDevicePowerState
GetCommandLineA
GetACP
ExpandEnvironmentStringsA
ExitProcess
EnumSystemLocalesW
EnumLanguageGroupLocalesW
CreateWaitableTimerW
CloseHandle
CallNamedPipeW
GetModuleHandleA
SetSystemPowerState
SetComputerNameA
RtlMoveMemory
LCMapStringA
GetStartupInfoA
HeapAlloc
GetVersionExA
GetLogicalDrives
ole32
StringFromGUID2
CoCreateInstance
CLSIDFromString
dbghelp
FindDebugInfoFileEx
ImageNtHeader
ImageRvaToVa
MapDebugInformation
SymEnumSourceFiles
SymFromAddr
SymGetLineFromAddr64
SymGetLinePrev64
SymGetSymFromAddr
SymGetSymPrev
SymGetTypeFromName
SymMatchString
SymSetOptions
UnmapDebugInformation
ImageDirectoryEntryToData
comctl32
CreateStatusWindowA
DestroyPropertySheetPage
DrawInsert
FlatSB_SetScrollInfo
ImageList_DrawEx
ImageList_GetBkColor
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_Merge
ImageList_SetFilter
UninitializeFlatSB
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ