__GetWindowTextLengthA@12
Static task
static1
Behavioral task
behavioral1
Sample
3d5654accf9272fc406ccdc2e6445e9c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d5654accf9272fc406ccdc2e6445e9c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d5654accf9272fc406ccdc2e6445e9c_JaffaCakes118
-
Size
148KB
-
MD5
3d5654accf9272fc406ccdc2e6445e9c
-
SHA1
0eb7b5d76aa87f3080e134f127a225c6f7e4561c
-
SHA256
9ef4795681568c02742c3dc186517346a7f2665ec69bb36134336afbefaa5a7a
-
SHA512
8be55599eec7f0dd294b7071789cb24554b94730bc6b450b9b3c59d7d63a8ce3bff912ec78bbfd8d69000f0396528ad8aebcfaebb23adf000f033d60d64d385a
-
SSDEEP
3072:xAwYIp1mvvI1Bj7wKO7QdQsk/VEERo+iv3+PcoKVFgwNU7YIdEREyzAadG:71mvvI1BwbcNkNEEwGRK8SjG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d5654accf9272fc406ccdc2e6445e9c_JaffaCakes118
Files
-
3d5654accf9272fc406ccdc2e6445e9c_JaffaCakes118.exe windows:5 windows x86 arch:x86
1c4d9f7b6f7e468f403d97374fb85eec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrFormatKBSizeW
PathUndecorateA
StrPBrkA
ChrCmpIA
PathCompactPathA
shell32
ord147
kernel32
lstrcmpA
SetEndOfFile
GetCommProperties
GetSystemPowerStatus
LockFileEx
FileTimeToDosDateTime
OpenSemaphoreW
CloseHandle
GetProfileSectionW
GetCommandLineW
CreateMutexA
QueueUserAPC
QueryDosDeviceA
LoadLibraryExW
lstrcpyA
OpenMutexA
LoadLibraryA
GetNamedPipeInfo
OpenSemaphoreA
DeleteTimerQueue
user32
RedrawWindow
GetDlgItem
EnableMenuItem
GetClassNameW
PeekMessageW
ChangeDisplaySettingsExA
SetSysColors
GetDC
GetIconInfo
wsprintfW
DrawTextExW
WaitForInputIdle
RemovePropA
LoadCursorW
KillTimer
GetWindowDC
LoadMenuIndirectA
GetWindowTextLengthW
UnloadKeyboardLayout
GetRawInputDeviceInfoW
GetMenuStringA
IsDlgButtonChecked
GetMenuContextHelpId
CreateCaret
ClipCursor
DispatchMessageA
GetMenuInfo
GetSystemMetrics
IsWindowVisible
SetCaretPos
SendMessageW
SetScrollInfo
GetScrollPos
GetMessageTime
TabbedTextOutW
UpdateWindow
GetWindow
WindowFromDC
gdi32
GetEnhMetaFileBits
CreatePolygonRgn
Chord
SetPolyFillMode
GetPolyFillMode
CreateCompatibleBitmap
EndPath
SetBrushOrgEx
GetDeviceCaps
GetTextMetricsW
GetTextExtentPoint32W
SetLayout
SetTextJustification
GetCharABCWidthsA
RoundRect
advapi32
IsValidAcl
AddAccessDeniedAce
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.image Size: 1024B - Virtual size: 597B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.memo0 Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_mem Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.datse Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ