Static task
static1
Behavioral task
behavioral1
Sample
5d49487e41c6c5a203f824d94ec7eba4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d49487e41c6c5a203f824d94ec7eba4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d49487e41c6c5a203f824d94ec7eba4_JaffaCakes118
-
Size
97KB
-
MD5
5d49487e41c6c5a203f824d94ec7eba4
-
SHA1
22b30b8ce6afceadccdfa230b0d0d7102cfa0e6b
-
SHA256
af33db49186a45d25079908e7f50452e4a8f1683dc8c5c88661dffa761ea7b82
-
SHA512
0d0316b2910f6aef3e7af62756489b27b2e82bce5af815a4d13fc7d1096a0b237991882ddb5dcc239f3ab3a7edfc6cd9975b011a393e1f52ca80503bfea9b6ea
-
SSDEEP
3072:WWq7ogJuOCcDRM4MicMQ076ihmWQ3zSSZ35AoP:WgfcDWqcY3cv3zvdP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d49487e41c6c5a203f824d94ec7eba4_JaffaCakes118
Files
-
5d49487e41c6c5a203f824d94ec7eba4_JaffaCakes118.exe windows:4 windows x86 arch:x86
5347e1daa62b6af6e3ef50b542614a13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ChildWindowFromPoint
MessageBoxA
MoveWindow
LoadIconA
DrawEdge
MsgWaitForMultipleObjects
KillTimer
GetKeyNameTextA
IsWindowVisible
ShowOwnedPopups
IsIconic
RemovePropA
GetWindowDC
LoadBitmapA
LoadKeyboardLayoutA
GetKeyboardLayout
EnableWindow
SetWindowLongW
CharLowerA
IsChild
FillRect
PostQuitMessage
GetClassInfoA
GetScrollRange
SetPropA
RemoveMenu
EqualRect
DestroyCursor
GetClassLongA
CreateMenu
AdjustWindowRectEx
MessageBeep
ShowScrollBar
InsertMenuA
EnumChildWindows
DestroyMenu
ScrollWindow
GetLastActivePopup
GetScrollInfo
GetTopWindow
SetParent
CallNextHookEx
IsWindow
SetWindowPlacement
DefFrameProcA
GetParent
GetForegroundWindow
IntersectRect
PostMessageA
OffsetRect
TranslateMessage
CallWindowProcA
FrameRect
RedrawWindow
GetMenuItemID
CharNextA
GetClientRect
GetSystemMetrics
SendMessageA
SetMenu
TrackPopupMenu
GetMenuItemCount
SetCapture
GetMenuState
GetMenuStringA
GetKeyState
GetPropA
BeginPaint
GetWindowLongW
IsZoomed
WindowFromPoint
DestroyIcon
GetCursor
SetClassLongA
SetScrollRange
DispatchMessageW
GetMessagePos
GetDlgItem
SystemParametersInfoA
GetSystemMenu
GetKeyboardState
GetWindowLongA
CloseClipboard
DefMDIChildProcA
WaitMessage
GetDCEx
SetScrollInfo
CharToOemA
RegisterClipboardFormatA
TranslateMDISysAccel
CreateWindowExA
IsWindowUnicode
SetMenuItemInfoA
CreatePopupMenu
EmptyClipboard
MapVirtualKeyA
GetCursorPos
DestroyWindow
GetActiveWindow
InvalidateRect
EnumWindows
IsDialogMessageA
GetSysColor
GetMenu
SetCursor
CharNextW
LoadCursorA
GetMenuItemInfoA
GetCapture
GetDC
SetScrollPos
GetClipboardData
SetWindowPos
MapWindowPoints
GetSubMenu
PeekMessageW
SetTimer
SetWindowsHookExA
GetWindowThreadProcessId
EndPaint
GetWindowTextA
GetKeyboardLayoutList
UpdateWindow
ReleaseDC
OemToCharA
GetKeyboardType
SetClipboardData
ClientToScreen
PtInRect
SetWindowLongA
GetFocus
CheckMenuItem
DrawTextA
ShowWindow
CharUpperBuffA
GetIconInfo
GetWindow
DrawMenuBar
SetForegroundWindow
EnumThreadWindows
GetWindowRect
GetDesktopWindow
ScreenToClient
OpenClipboard
DefWindowProcA
CreateIcon
InflateRect
DrawIcon
kernel32
GetThreadLocale
ExitThread
LocalAlloc
ExitProcess
ReadFile
GetProcAddress
InitializeCriticalSection
IsBadReadPtr
FreeResource
GetModuleHandleA
WaitForSingleObject
lstrlenA
VirtualAlloc
GetCurrentThread
GetCommandLineW
VirtualAllocEx
LoadLibraryA
GetCommandLineA
GetACP
GetCurrentThreadId
GetLocalTime
shlwapi
PathIsContentTypeA
PathFileExistsA
SHGetValueA
gdi32
CreateFontIndirectA
CreateDIBitmap
CreatePalette
CreatePenIndirect
GetBitmapBits
oleaut32
GetErrorInfo
SafeArrayGetElement
SafeArrayPtrOfIndex
SysStringLen
RegisterTypeLib
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 878B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc7 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc0 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc9 Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ