Static task
static1
Behavioral task
behavioral1
Sample
4319783adeccbfcad747079e71539d32_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4319783adeccbfcad747079e71539d32_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4319783adeccbfcad747079e71539d32_JaffaCakes118
-
Size
212KB
-
MD5
4319783adeccbfcad747079e71539d32
-
SHA1
60a9ff2e0993bf3f5d7a3a34b1f004ba73938bf7
-
SHA256
1e7d7794734c7b41280ff0fc54b7c35a1ef095d85db65b1fe87ef6b0f7a07a7f
-
SHA512
347bce55395415489a31963635213005669a759c9d3fc49f0a7a94c4f1d8c42b6682f42f93e11d0827660ad660d2fef9ad416a3642179a992a26e0bc30603efe
-
SSDEEP
1536:U7Nx7zA4eBF2GQRVVsRQ5gRkmqeO0D/btGSRSh5+OsSC:6NVzLeBF2vVqwmRDtlEh5+OZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4319783adeccbfcad747079e71539d32_JaffaCakes118
Files
-
4319783adeccbfcad747079e71539d32_JaffaCakes118.exe windows:4 windows x86 arch:x86
56bed5644a39fca008a447496003937e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowDC
TranslateMessage
GetMessageA
GetDC
LoadCursorA
DrawTextA
DispatchMessageA
DefWindowProcA
CreateWindowExA
LoadIconA
PostMessageA
PostQuitMessage
RegisterClassExA
UpdateWindow
EndPaint
GetDlgCtrlID
GetParent
GetWindowLongA
GetWindowRect
LoadBitmapA
ReleaseCapture
SetCapture
SetWindowLongA
SetWindowPos
ShowWindow
SetWindowTextA
SetWindowRgn
SetRect
GetSystemMetrics
BeginPaint
SendMessageA
kernel32
LocalFree
LocalAlloc
MulDiv
SetLastError
CloseHandle
lstrcpyA
CreateThread
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
GetTickCount
LoadResource
LockResource
SetThreadPriority
SizeofResource
Sleep
lstrcatA
gdi32
CreateFontA
CreateCompatibleBitmap
SetTextColor
SetTextAlign
SetBkMode
SetBkColor
SelectObject
DeleteObject
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateDIBSection
CreateCompatibleDC
CombineRgn
BitBlt
GetDeviceCaps
ole32
CoInitialize
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
oleaut32
OleLoadPicture
winmm
waveOutWrite
waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutReset
waveOutUnprepareHeader
waveOutGetPosition
Sections
pec1 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE