Static task
static1
Behavioral task
behavioral1
Sample
37be8fac1071170762f3be020b1c08ef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37be8fac1071170762f3be020b1c08ef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37be8fac1071170762f3be020b1c08ef_JaffaCakes118
-
Size
65KB
-
MD5
37be8fac1071170762f3be020b1c08ef
-
SHA1
30dbadb79690b05b4ff258edc76f2f6097e62bd8
-
SHA256
5648941dc818661595e51ffccd8a60dfa2b812063f430fc1f277575ea7d7baab
-
SHA512
8f8dcf6110a200454137a2fad62f502a09731af7d9f6350be4c24df9b6a5475b9b25b076147cd0640ee467bcfdbbb4e2fdb3d06f0ee7f17fdb99d190ffb71001
-
SSDEEP
768:DYBjOZDZF/rZpdDCBdnNS06PP9gkpGgHrIXNmno/AlSWUOX1S0yVNxbfaod9sbT4:kByprZppCBdn8I0gAQOX1UV/faozsY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37be8fac1071170762f3be020b1c08ef_JaffaCakes118
Files
-
37be8fac1071170762f3be020b1c08ef_JaffaCakes118.exe windows:1 windows x86 arch:x86
5cd56e724dbf873275011ff7385e3ef8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AdjustWindowRectEx
CallWindowProcA
ClientToScreen
DrawTextExA
GetClassNameA
GetMessageExtraInfo
GetMessageTime
GetWindowRect
IsChild
IsWindowEnabled
LoadIconA
MapWindowPoints
RegisterClassA
RegisterWindowMessageA
SetWindowPos
WinHelpA
kernel32
EnumSystemLanguageGroupsA
GetFileSize
GetFullPathNameA
GetModuleHandleA
GetProcAddress
GetVersion
LoadLibraryA
SetCurrentDirectoryA
VirtualAlloc
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 21KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE