Static task
static1
Behavioral task
behavioral1
Sample
6a6f53236847aac1f5474fcb9ad290c8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a6f53236847aac1f5474fcb9ad290c8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a6f53236847aac1f5474fcb9ad290c8_JaffaCakes118
-
Size
44KB
-
MD5
6a6f53236847aac1f5474fcb9ad290c8
-
SHA1
53cc11a8f0caa0544eaf152961c3fdc36769fa02
-
SHA256
b115717fe44bb39df29d80d49704aa3187bf1c5f82c904204fe7a1f35e8470c9
-
SHA512
2ee691fe3029751b1f8d6dfd13cd944f338e4942c4a84563652263210f36c7d10cc292aae7b52bbef85604aa92dc3fa0f6c7f63eb08159a7e547e20ed7d2eb96
-
SSDEEP
768:vuX+bTXUmHTfIgzkqh+A0yhygb1UQtLo/d6ztwyrkqsYBIgf:W+UmzyG+AoM1UQI1okqQgf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a6f53236847aac1f5474fcb9ad290c8_JaffaCakes118
Files
-
6a6f53236847aac1f5474fcb9ad290c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
525ebf51ad968ac1767f7d2de66d4422
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassNameA
FindWindowExA
CharUpperBuffA
GetWindowLongA
GetDC
GetForegroundWindow
GetClientRect
SendMessageA
MessageBoxA
kernel32
lstrlenA
CreateThread
CreateFileA
GetVersionExA
lstrcpyA
ReadFile
VirtualAlloc
GetFileTime
GetLastError
GetModuleHandleA
GetTickCount
DeleteFileA
lstrcmpiA
GetLocaleInfoA
TerminateThread
VirtualFree
SetEndOfFile
SetFilePointer
CloseHandle
WideCharToMultiByte
GetProcAddress
WriteFile
ExitProcess
LoadLibraryA
lstrcatA
GetFileSize
lstrlenW
lstrcmpA
Sleep
gdi32
GetPixel
CreateCompatibleDC
SelectObject
DeleteDC
BitBlt
CreateDCA
DeleteObject
CreateDIBSection
GetDIBits
SetPixel
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_INIT_ Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE