Static task
static1
Behavioral task
behavioral1
Sample
68623f501ec0fac452b7998fc55281e3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
68623f501ec0fac452b7998fc55281e3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68623f501ec0fac452b7998fc55281e3_JaffaCakes118
-
Size
211KB
-
MD5
68623f501ec0fac452b7998fc55281e3
-
SHA1
1009196e6b5074c4e29de101dc03a0a9fdea8b0b
-
SHA256
5c0f306116d6284451034c0b434d7abfea4019df6659b2ed29ba28a03e44e3eb
-
SHA512
92bf24abda52d1201909010adc851fde11b5a9ecf0d1f7811d6ce04b0b87f05969f6bc5a21929a2a0932ddaf6915d5cd299cc4faed7103f6ffc2da641ec6d7d0
-
SSDEEP
3072:bHnzgqZ3h9hwFOAUCEzh70FCBoRzxXICKP8UjgdRYCL7ERq9LAzmColX:bXZAREYCmxXICKP8fdRYCHERcWmZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68623f501ec0fac452b7998fc55281e3_JaffaCakes118
Files
-
68623f501ec0fac452b7998fc55281e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
fbfa1e07cdd0211f641711a32f5d14fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharLowerA
CheckMenuItem
DrawEdge
DrawMenuBar
FillRect
GetMenuItemID
GetScrollInfo
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowRect
IntersectRect
IsChild
IsDialogMessageA
IsWindowEnabled
LoadIconA
LoadStringA
PtInRect
SetClassLongA
SetScrollInfo
SetWindowsHookExA
shell32
DoEnvironmentSubstW
ExtractAssociatedIconW
ExtractIconExW
SHAppBarMessage
SHBrowseForFolder
SHChangeNotify
SHCreateDirectoryExW
SHFileOperationA
SHFileOperationW
SHGetDesktopFolder
SHGetFileInfoA
SHGetFolderLocation
SHGetSettings
SHGetSpecialFolderPathW
ShellExecuteA
ShellExecuteEx
ShellExecuteExA
Shell_NotifyIconA
kernel32
CompareFileTime
CreateDirectoryA
FreeLibrary
FreeResource
GetCurrentProcessId
GetDateFormatA
GetFileSize
GetFullPathNameA
GetLocaleInfoA
GetStringTypeExA
GetSystemDirectoryA
GetSystemDirectoryW
GetVersion
GetWindowsDirectoryA
GlobalDeleteAtom
GlobalHandle
HeapCreate
InterlockedIncrement
IsBadCodePtr
LocalAlloc
SetCurrentDirectoryA
SetErrorMode
SetThreadPriority
SizeofResource
UnhandledExceptionFilter
gdi32
AddFontResourceA
CloseEnhMetaFile
CreateBrushIndirect
CreateDIBPatternBrushPt
CreateDIBitmap
CreateEnhMetaFileA
CreateFontA
CreatePolygonRgn
CreateSolidBrush
ExtCreateRegion
ExtSelectClipRgn
GetMetaFileBitsEx
GetPaletteEntries
GetPixel
GetRegionData
GetTextExtentPoint32A
GetTextFaceW
GetTextMetricsA
IntersectClipRect
Pie
PolyBezierTo
Polygon
RectInRegion
SaveDC
SetBkMode
SetMapMode
SetRectRgn
SetTextAlign
SetTextColor
comctl32
CreateToolbarEx
DestroyPropertySheetPage
ImageList_GetDragImage
ImageList_GetIcon
ImageList_GetIconSize
ImageList_Replace
ImageList_Write
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
JGbvh5EL Size: 1024B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE