Static task
static1
Behavioral task
behavioral1
Sample
6872a2ff716a71f38af276f5cdd9938f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6872a2ff716a71f38af276f5cdd9938f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6872a2ff716a71f38af276f5cdd9938f_JaffaCakes118
-
Size
27KB
-
MD5
6872a2ff716a71f38af276f5cdd9938f
-
SHA1
cdf8419ea29bb5d99a3ffc5259d06efc71caf2a4
-
SHA256
6fb635f2c3feb89ad44852e143d0a10757299029474482826430b2e15c252562
-
SHA512
03c001a3112cd78a36e34fa8e78d7a1ede2ac3da0f8b0c4dbd50cd6a8d3cdac6079bb166ea576494d80740c2e1bcfbf30643ca2babd09cf072af9d90aea6f1ff
-
SSDEEP
384:9xnNZsJS/PQIXJAWQtvJIwHo0XqfIp39ruQ0tAP8eR6yNs3:99LsJS/zXJmLlHLMIjAuNwH3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6872a2ff716a71f38af276f5cdd9938f_JaffaCakes118
Files
-
6872a2ff716a71f38af276f5cdd9938f_JaffaCakes118.exe windows:4 windows x86 arch:x86
2944f57af86ae5ae0236e45ca3bc02ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyImage
GetDlgItem
DrawIconEx
GetCursor
GetFocus
GetWindowTextA
EndDialog
IsMenu
DrawTextW
CopyRect
DrawTextA
GetDC
CloseWindow
CreateIcon
IsWindow
LoadMenuA
GetWindowTextLengthA
CopyIcon
DialogBoxParamA
DrawIcon
LoadCursorA
DialogBoxParamW
GetMenu
InsertMenuA
kernel32
lstrcatA
GetVersion
GetStdHandle
GetStartupInfoA
GetACP
lstrcpyA
lstrcpynA
GetOEMCP
GetCommandLineA
lstrcpynW
WriteFile
GetCurrentProcess
GetModuleFileNameA
GetStringTypeA
MultiByteToWideChar
SetHandleCount
GetStringTypeW
LCMapStringA
GetCPInfo
TerminateProcess
CreateFileA
SetFilePointer
LCMapStringW
GetFileType
comctl32
MenuHelp
ImageList_DragEnter
ImageList_Create
ImageList_EndDrag
DrawStatusTextW
DrawStatusText
CreateStatusWindowW
ImageList_Draw
ImageList_Add
ImageList_LoadImageA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 16.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ