?KJFDkljfljhUYDFuifUKYFlKFilFUYFUIh@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
3b5f0946db05c47a03a4dedce319c29a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b5f0946db05c47a03a4dedce319c29a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b5f0946db05c47a03a4dedce319c29a_JaffaCakes118
-
Size
220KB
-
MD5
3b5f0946db05c47a03a4dedce319c29a
-
SHA1
12e1ff44d827b89aa2fcf570b1b33df015862001
-
SHA256
8f1c7fbd4a1a912c14035f1d52bd254def422592977edad065363f688026ee23
-
SHA512
b22eae5fb6aa643b595fa6d1ac3f76a8d12df9bf7c9afec18c2a3e8ba308098c7bda254037e284b757487a06ed6726149c9ee3c12e18f3dbf8db176840ddd14f
-
SSDEEP
6144:QgOPbZiY+OD4+qM2KYUgfgg+CroKFqjNx8JtOCbpo7:QcY9eMJTgfgglrJYkzb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b5f0946db05c47a03a4dedce319c29a_JaffaCakes118
Files
-
3b5f0946db05c47a03a4dedce319c29a_JaffaCakes118.exe windows:5 windows x86 arch:x86
7b3040265750fd3af66fdb05eeb50304
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBrushIndirect
GetDIBColorTable
CreateFontW
SetBitmapBits
CreateDiscardableBitmap
StretchDIBits
CreateRectRgn
SetViewportExtEx
SelectObject
TextOutW
CreateSolidBrush
BitBlt
GetNearestColor
kernel32
LocalAlloc
HeapUnlock
WaitCommEvent
CreateRemoteThread
SetSystemTime
GetStartupInfoA
FormatMessageW
GetCurrentThread
OpenEventA
GetCommProperties
LoadResource
LocalFree
LoadLibraryA
FormatMessageA
IsDBCSLeadByte
user32
RedrawWindow
GetClassInfoW
CallWindowProcW
DragObject
CharToOemA
TrackPopupMenuEx
SetActiveWindow
LoadIconW
HideCaret
FrameRect
ScreenToClient
GetKeyState
SetUserObjectInformationW
OemToCharA
WaitMessage
ToUnicodeEx
DefDlgProcA
GetDoubleClickTime
RegisterHotKey
SetCaretPos
GetDlgItem
DrawFrameControl
CreateIconFromResource
SendMessageTimeoutA
GetClassLongA
AdjustWindowRect
InsertMenuA
CreateWindowExW
DrawIconEx
comdlg32
CommDlgExtendedError
PrintDlgW
Exports
Exports
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 35KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ