Static task
static1
Behavioral task
behavioral1
Sample
4499324ba51a079eab7b04a7c0537926_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4499324ba51a079eab7b04a7c0537926_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4499324ba51a079eab7b04a7c0537926_JaffaCakes118
-
Size
116KB
-
MD5
4499324ba51a079eab7b04a7c0537926
-
SHA1
b0aa8807003a3b1dbeac9516af06ce8a737fd763
-
SHA256
3b795818f66edd655b8046197fa82b8fd69169c2f208479ecb5567888dc0fa73
-
SHA512
588ee6d6de1b62ab2c4701b88f384cb3a569be5b79e1017a90dc34886932aa476657f86122b8d51b78094bd591d121faff578dbc9973523fc147b2f35b456e32
-
SSDEEP
768:dOGJgU1zkWZbx+HkXAoLovJXmc4arSRGg/oHcKrHmAuCNBAj4H0cdYwG8gK39W/:dOGiWzNZ4vw5R9/o8f1cBk4UuzRg/A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4499324ba51a079eab7b04a7c0537926_JaffaCakes118
Files
-
4499324ba51a079eab7b04a7c0537926_JaffaCakes118.exe windows:1 windows x86 arch:x86
c357cea54ce73a28eed56b70ff043b00
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
BitBlt
CreateCompatibleDC
CreateDIBitmap
CreateFontA
CreatePalette
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
GetStockObject
LineTo
MoveToEx
RealizePalette
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetTextColor
user32
BeginPaint
CheckMenuItem
CreateDialogParamA
CreateWindowExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
DispatchMessageA
DrawTextA
EndDialog
EndPaint
FillRect
GetClientRect
GetDC
GetDlgItemTextA
GetMenu
GetMessageA
GetSysColor
GetSystemMetrics
GetWindowRect
InvalidateRect
IsDialogMessageA
IsIconic
KillTimer
LoadAcceleratorsA
LoadBitmapA
LoadCursorA
LoadIconA
MessageBeep
MessageBoxA
MoveWindow
PostQuitMessage
RegisterClassA
SetDlgItemTextA
SetFocus
SetTimer
ShowWindow
TranslateAcceleratorA
TranslateMessage
UpdateWindow
kernel32
ExitProcess
GetCommandLineA
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalFree
Sleep
_lclose
_lcreat
_lopen
_lread
_lwrite
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE