Static task
static1
Behavioral task
behavioral1
Sample
4d2ad15c1ad3c66ae2b0f6a4295ca27e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d2ad15c1ad3c66ae2b0f6a4295ca27e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d2ad15c1ad3c66ae2b0f6a4295ca27e_JaffaCakes118
-
Size
58KB
-
MD5
4d2ad15c1ad3c66ae2b0f6a4295ca27e
-
SHA1
5b317227603516ed50597d074d3241cc03bf0647
-
SHA256
2be3f3177d5177ed29106544524f0f8bc151a843f15f9ab1b0fcd22cf5d44074
-
SHA512
161543ef275e1b6f8c7af0b0651ef80ddc7ce902fc6cac559cd924efe05f38331df7d5ded2fe0f8a0390e40bc8cdc7d96bf47f56ab05eb4190c31cf55c422465
-
SSDEEP
1536:J+Tq7X85bqL7BnpNvvi4fgyPo6ADwB9RRA3Wi:QTnQ7BnpN/fe6OQ9RRA3W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d2ad15c1ad3c66ae2b0f6a4295ca27e_JaffaCakes118
Files
-
4d2ad15c1ad3c66ae2b0f6a4295ca27e_JaffaCakes118.exe windows:4 windows x86 arch:x86
a2dea58d4ade9a0bddce39aa1dd65782
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowLongA
SetWindowTextA
SetDlgItemTextA
SetCapture
SendMessageA
ReleaseCapture
PtInRect
MessageBoxA
InvalidateRect
GetWindowRect
GetParent
CallWindowProcA
DialogBoxParamA
EndDialog
GetActiveWindow
GetCapture
GetCursorPos
GetDlgCtrlID
GetDlgItem
kernel32
CreateThread
ExitThread
ResumeThread
SetThreadPriority
Sleep
lstrcpyA
lstrlenA
SuspendThread
CloseHandle
CopyFileA
CreateFileA
ExitProcess
GetFileSize
GetModuleHandleA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
ReadFile
WriteFile
shell32
ShellExecuteA
gdi32
SelectObject
SetBkMode
SetTextColor
GetStockObject
GetObjectA
CreateFontIndirectA
comdlg32
GetOpenFileNameA
winmm
waveOutWrite
waveOutUnprepareHeader
waveOutRestart
waveOutReset
waveOutPrepareHeader
waveOutPause
waveOutGetPosition
waveOutClose
waveOutOpen
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE