?_MapWindowPoints@@YGPAXPAKPAEPAI@Z
Static task
static1
Behavioral task
behavioral1
Sample
458928d3c9f2d802fec7add22fdea325_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
458928d3c9f2d802fec7add22fdea325_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
458928d3c9f2d802fec7add22fdea325_JaffaCakes118
-
Size
149KB
-
MD5
458928d3c9f2d802fec7add22fdea325
-
SHA1
4afc01b29ee15a7b3281d2b98c9c71cb4d99641f
-
SHA256
149575e01b86235680539bbe06ebd69a6f57bb7dd244c1ea8d3989a2628dd15a
-
SHA512
a27f1c5526bfecf650dd0385423d3d485a5f453529e8b4effbeaab43c17019010435d7877e5f71174ff60130f8c580a656bdd8ac3d61e02f843b0c43de6c4673
-
SSDEEP
3072:Z3zE+OjZM1izCzxMYxO3GQFrr5qraUciSV3HY11Ri73vNegB7sIF/zPahq73KEU:ZjEZJ+zxMY83tr56aUFG3HYli5eg15zv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 458928d3c9f2d802fec7add22fdea325_JaffaCakes118
Files
-
458928d3c9f2d802fec7add22fdea325_JaffaCakes118.exe windows:5 windows x86 arch:x86
5127e8e86608bcb935a40bcf5c45803d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathMakePrettyA
StrCmpNIW
PathCompactPathW
StrTrimW
StrRStrIW
StrCpyNW
ord158
PathFindNextComponentW
ChrCmpIW
kernel32
CancelWaitableTimer
OpenSemaphoreA
lstrcmpiA
LoadLibraryExW
MoveFileExW
GetModuleFileNameW
GetTapeParameters
FileTimeToDosDateTime
SetMailslotInfo
GetCommModemStatus
SetInformationJobObject
GlobalCompact
IsBadReadPtr
SetMessageWaitingIndicator
SetTapePosition
LoadLibraryA
GetModuleHandleExA
SetupComm
user32
DrawIcon
InvalidateRgn
PostMessageW
LoadImageW
CloseClipboard
EnumDesktopWindows
GetClientRect
SetWinEventHook
SetRect
GetWindowTextW
EnableMenuItem
GetSysColor
MessageBoxW
SystemParametersInfoA
MapWindowPoints
GetDlgCtrlID
CreateCursor
GetPropW
gdi32
PlayEnhMetaFileRecord
SetArcDirection
SetBkColor
GetEnhMetaFileBits
GetRandomRgn
GetTextExtentExPointW
CreateFontIndirectA
GetDeviceCaps
CreateEnhMetaFileA
CreatePolyPolygonRgn
SetViewportExtEx
msvcrt
memset
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.icode Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m_data Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.n_data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 986B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ