Static task
static1
Behavioral task
behavioral1
Sample
68335a66cfffd1f12bbce14741426b11_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
68335a66cfffd1f12bbce14741426b11_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68335a66cfffd1f12bbce14741426b11_JaffaCakes118
-
Size
111KB
-
MD5
68335a66cfffd1f12bbce14741426b11
-
SHA1
245c8eec3aa38e93df97ab13c69e501004fba552
-
SHA256
066c9e2b061c3045fc844384fd4eb11f9b458fcd81f736bae8d34a4e8af02575
-
SHA512
732690f9bac1c132f926937c94edfc6a474243f251ff348abd24f060a048eae232c61d3e84f3fd61e41394c889f4a5c8679ca2eddc8a67d509e976f15dc9e5ab
-
SSDEEP
1536:/RQ39GarJq06DICJvhCGneVQ6fkFP2FDG5OSYFTx/tPa5D53pDIpI4jF/tZrnd:/MkarJqFICJAuhqSuQYFTqjDIj1tBd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68335a66cfffd1f12bbce14741426b11_JaffaCakes118
Files
-
68335a66cfffd1f12bbce14741426b11_JaffaCakes118.exe windows:4 windows x86 arch:x86
16835eac90013eb9aa0379185ac474ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBitmap
CreateBrushIndirect
SelectObject
GetPaletteEntries
CreateFontIndirectA
CreatePenIndirect
SetBkMode
GetPixel
user32
GetDlgItem
SetFocus
IsWindowVisible
IsWindowEnabled
GetKeyboardLayoutList
GetScrollInfo
SetWindowPos
SendMessageW
CharNextA
DrawTextA
RedrawWindow
RemovePropA
GetDCEx
OpenClipboard
GetScrollPos
SetParent
SetWindowLongA
GetWindowThreadProcessId
AdjustWindowRectEx
GetKeyboardLayoutNameA
CharNextW
GetDesktopWindow
GetParent
PtInRect
GetCapture
RegisterClipboardFormatA
SystemParametersInfoA
EnableWindow
GetFocus
shell32
SHGetFileInfoA
SHGetFolderPathA
DragQueryFileA
SHFileOperationA
version
GetFileVersionInfoSizeA
VerFindFileA
kernel32
GetProcessHeap
GetModuleHandleA
VirtualAlloc
GetDiskFreeSpaceA
GetProcAddress
FindFirstFileA
MulDiv
DeleteFileA
LocalAlloc
VirtualFree
GetVersionExA
VirtualAllocEx
lstrlenA
ExitThread
FindClose
CompareStringA
Sections
CODE Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ