Static task
static1
Behavioral task
behavioral1
Sample
48b4cde5b7b0b742b75747e00bb89716_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
48b4cde5b7b0b742b75747e00bb89716_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48b4cde5b7b0b742b75747e00bb89716_JaffaCakes118
-
Size
171KB
-
MD5
48b4cde5b7b0b742b75747e00bb89716
-
SHA1
0f47952f521d9a130a3f2499c524ccf004d9c52e
-
SHA256
0651bfb8d7e03d9f6dfd08777a574a75f240cf810ae16dba6f0849c2a22d5fa3
-
SHA512
8fb3f8dcd6b5632643b13b50cd0dd91f2b6e633ec89dd751e47e65704fc58678ad8bc566f480faf94b76b2a9eb98700eba51ca5a64068e3b51e50b0f373731bf
-
SSDEEP
3072:B+2RsMGOToOAYzAhcIwxdmDRYsr0r8wTyq6Q:BTyRkoOAY8hvor8wZ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48b4cde5b7b0b742b75747e00bb89716_JaffaCakes118
Files
-
48b4cde5b7b0b742b75747e00bb89716_JaffaCakes118.exe windows:4 windows x86 arch:x86
431186c2fbd0006325939775ccd295f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
RegisterWindowMessageA
IsIconic
GetActiveWindow
advapi32
RegCreateKeyA
comctl32
ImageList_GetBkColor
ImageList_Remove
ImageList_Destroy
ImageList_DragShowNolock
ImageList_Draw
ImageList_Create
ImageList_Add
ImageList_DrawEx
ImageList_Read
ImageList_Write
kernel32
IsBadReadPtr
LoadLibraryExA
GetProcAddress
GetCommandLineW
VirtualAlloc
ExitThread
GetVersionExA
GetLastError
GetCommandLineA
LoadLibraryA
ExitProcess
GetOEMCP
GetModuleHandleA
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES02 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES86 Size: 512B - Virtual size: 391B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES44 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES00 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES72 Size: 512B - Virtual size: 203B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES43 Size: 1024B - Virtual size: 757B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES22 Size: 512B - Virtual size: 131B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES30 Size: 1024B - Virtual size: 595B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ