lDyRtV_sft81i@4
Static task
static1
Behavioral task
behavioral1
Sample
6150cce3c3314f6607be923015df699a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6150cce3c3314f6607be923015df699a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6150cce3c3314f6607be923015df699a_JaffaCakes118
-
Size
77KB
-
MD5
6150cce3c3314f6607be923015df699a
-
SHA1
4f065b0fbe56ff2c020039c5a8f7d3f1729b712f
-
SHA256
482f25e768a1edb793f46c7d6b77b5fa685a3d5c91605ac66db33ffb8ba90dd2
-
SHA512
7addec2c3533d5ea54acfa6706f6a985dc469e367a5b67e863585cddc4a4a80dcb0042825c57e381cf5aca227e36c3e6d538227745a3896fee30792c58f6a86d
-
SSDEEP
1536:+silaTbTnmiSFBOmb1lIbNtkD9eUfujHI9gm4Fc:+TlcbTNEZvHBfcHIz4Fc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6150cce3c3314f6607be923015df699a_JaffaCakes118
Files
-
6150cce3c3314f6607be923015df699a_JaffaCakes118.exe windows:4 windows x86 arch:x86
7896ce837f6bfd77d2d3d967089243fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
LoadLibraryA
SetThreadLocale
Sleep
LockResource
EnterCriticalSection
LocalReAlloc
VirtualAllocEx
CloseHandle
GlobalDeleteAtom
SetHandleCount
GetFullPathNameA
GetStringTypeW
GetTickCount
GetModuleFileNameA
ExitProcess
FindFirstFileA
ReadFile
VirtualQuery
InitializeCriticalSection
CreateEventA
HeapFree
comdlg32
ChooseColorA
FindTextA
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
user32
BeginPaint
GetCapture
GetDC
WindowFromPoint
LoadIconA
IsDialogMessageW
ChildWindowFromPoint
CloseClipboard
DrawIconEx
GetLastActivePopup
IsRectEmpty
TranslateMDISysAccel
RegisterClipboardFormatA
GetMenu
MapVirtualKeyA
IsIconic
GetParent
IsZoomed
SetRect
MessageBoxA
GetDlgItem
LoadKeyboardLayoutA
GetActiveWindow
GetMenuItemCount
SetClipboardData
KillTimer
DispatchMessageW
GetDesktopWindow
DestroyMenu
GetKeyNameTextA
OemToCharA
LoadBitmapA
SetMenu
EnableWindow
GetSystemMetrics
SystemParametersInfoA
SendMessageW
GetWindowLongW
SetPropA
CreateMenu
CharToOemA
IsCharLowerA
SetWindowLongW
IsWindowEnabled
GetClientRect
RegisterWindowMessageA
DefWindowProcA
MessageBeep
GetIconInfo
GetWindowThreadProcessId
EndDialog
DestroyIcon
GetClassLongA
GetSystemMenu
GetWindowPlacement
GetKeyState
ScrollWindow
CharNextW
UpdateWindow
IsDialogMessageA
DestroyWindow
SetWindowTextA
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 48KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ