Static task
static1
Behavioral task
behavioral1
Sample
6aba63a624491ae687a51bcc43cf19f8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6aba63a624491ae687a51bcc43cf19f8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6aba63a624491ae687a51bcc43cf19f8_JaffaCakes118
-
Size
51KB
-
MD5
6aba63a624491ae687a51bcc43cf19f8
-
SHA1
e7e95b0c526bea33f7fa500c0ed40ff3b238e7f3
-
SHA256
0c63c0ed6e93485a0af2ed493278d55597cfa09961eee878027e190b47b95961
-
SHA512
362ea205eeb5ad8797ade4b890a0b00f90ac37b338e1102f7ef98678a5d59b5f7311157ef460c402b1d7a3ff50283f1ef01d3ef56b16ddddddef033173f88dbc
-
SSDEEP
768:d4AM/cTGKyf9IBejQsoYcw9RL18obfLDyqx1jbb4ZlDwP9:iAM/cSh168QzQL18On+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aba63a624491ae687a51bcc43cf19f8_JaffaCakes118
Files
-
6aba63a624491ae687a51bcc43cf19f8_JaffaCakes118.exe windows:5 windows x86 arch:x86
7c1fd1a52e59b7d6ef7bf55e7e7bc123
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
LoadLibraryW
GetWindowsDirectoryA
lstrcatA
CreateFileA
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
IsZoomed
LoadAcceleratorsW
LoadIconW
OpenClipboard
PeekMessageW
GetWindowPlacement
PostQuitMessage
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
ScreenToClient
SetCapture
SetCursor
SetCursorPos
SetWindowTextW
SetWindowsHookExW
ShowCursor
ShowWindow
TranslateMDISysAccel
TranslateMessage
UpdateWindow
wsprintfW
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetMessageW
GetMenu
GetDlgItemInt
GetClipboardData
GetClientRect
FillRect
EnumChildWindows
EndPaint
EnableWindow
DrawMenuBar
DispatchMessageW
DestroyWindow
DefMDIChildProcW
DefFrameProcW
CreateDialogParamW
CloseClipboard
CheckMenuItem
CallNextHookEx
BeginPaint
PostMessageW
gdi32
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectW
CreateSolidBrush
DeleteDC
DeleteObject
Escape
ExtTextOutW
TranslateCharsetInfo
TextOutW
StretchBlt
SetTextColor
SetStretchBltMode
SetBkColor
SelectObject
PatBlt
GetTextMetricsW
GetTextFaceW
GetTextExtentPointW
GetTextExtentPoint32W
GetStockObject
GetDeviceCaps
BitBlt
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.22 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.221 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 740B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ