Static task
static1
Behavioral task
behavioral1
Sample
4110598d3b08665f6f518d1832dc4f75_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4110598d3b08665f6f518d1832dc4f75_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4110598d3b08665f6f518d1832dc4f75_JaffaCakes118
-
Size
178KB
-
MD5
4110598d3b08665f6f518d1832dc4f75
-
SHA1
947f5471288886993bbb50f5853c87caaafebd45
-
SHA256
3a165d6723c54a9f13c2a65b2748fdaecb875b5a8d0e1363d4a97c0350c85281
-
SHA512
6b5cce24455e5335e1190170b60f4f6a543ca0446eeda84dfd40facfaaa4ac44df76f6615953515bacf127de12dbf22b2027ea221cfef0fc86e1acf62d5c53e8
-
SSDEEP
3072:cH9x2QJ94igFCeLU/htmLl4udpwQZ9r9C1rxYT5iOwelzKLf:6BJ2igFCIyYL5pwUCNxYT1A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4110598d3b08665f6f518d1832dc4f75_JaffaCakes118
Files
-
4110598d3b08665f6f518d1832dc4f75_JaffaCakes118.exe .ps1 windows:1 windows x86 arch:x86 polyglot
e940b1227cebe8633d99ed0570f8ecb4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
__setusermatherr
_except_handler3
__p__fmode
_controlfp
memcpy
_XcptFilter
_adjust_fdiv
__getmainargs
__set_app_type
_exit
_initterm
_acmdln
exit
gdi32
CreateCompatibleDC
DeleteDC
SetBkColor
SelectObject
GetStockObject
DeleteObject
BitBlt
EndPage
CreateSolidBrush
SetTextColor
GetObjectA
kernel32
GetModuleHandleA
GetLastError
GetStartupInfoA
HeapAlloc
SetErrorMode
GetModuleFileNameA
GetCurrentProcessId
HeapCreate
VirtualProtect
user32
ReleaseDC
CallWindowProcA
BeginPaint
GetMessageA
EndDialog
GetClientRect
DefMDIChildProcA
GetWindowDC
InsertMenuA
CreateIconIndirect
GetSysColor
CreateWindowExA
OffsetRect
SetPropA
TrackPopupMenuEx
EnumChildWindows
CopyRect
DrawFrameControl
GetParent
FrameRect
DestroyWindow
InvalidateRect
GetDlgItem
SendMessageA
LoadCursorA
DrawTextA
GetSystemMetrics
LoadImageA
ClientToScreen
GetDC
PtInRect
DefDlgProcA
DeferWindowPos
MoveWindow
DialogBoxParamA
DefWindowProcA
UnionRect
LoadMenuA
LoadAcceleratorsA
SetUserObjectSecurity
BeginDeferWindowPos
LoadIconA
SetWindowLongA
ScreenToClient
MessageBoxA
GetSubMenu
GetWindowRect
SetWindowPlacement
EndPaint
SetDlgItemTextA
SetWindowPos
ChildWindowFromPoint
CheckMenuItem
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ