Static task
static1
Behavioral task
behavioral1
Sample
716fdcb5179d9e99b143c1d0a8ebf770_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
716fdcb5179d9e99b143c1d0a8ebf770_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
716fdcb5179d9e99b143c1d0a8ebf770_JaffaCakes118
-
Size
102KB
-
MD5
716fdcb5179d9e99b143c1d0a8ebf770
-
SHA1
324a0f5be310836782e22209307339bf968ceb3e
-
SHA256
85724a21be938e6ea909e8bf484c53649d42dae33a4ab491bc0ee6a730572b02
-
SHA512
a03c877a8fcc9f4c311df1bf322ea4bce0b5626861b14567f8ae64f5cae529f08c10ba8af1cddbb8ed5ea854c63c9d16b8b3fdf5c8f0346da5b4d912b7e55f66
-
SSDEEP
1536:YNS8dJau+12Po9C3xWEn+LhfaSj4/PoaPao1xqbXyWe:4S2+1zCBJ+lfZU5P7KryW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 716fdcb5179d9e99b143c1d0a8ebf770_JaffaCakes118
Files
-
716fdcb5179d9e99b143c1d0a8ebf770_JaffaCakes118.exe windows:4 windows x86 arch:x86
8413da8e3de694f79828b4b5121589e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumWindows
GetClientRect
GetCursorPos
SetWindowPos
EnableScrollBar
PostQuitMessage
DestroyWindow
GetDC
SendMessageW
RemoveMenu
MsgWaitForMultipleObjects
PeekMessageA
ActivateKeyboardLayout
GetWindowDC
LoadStringA
RedrawWindow
CreateIcon
SetPropA
GetKeyNameTextA
GetLastActivePopup
SetScrollPos
GetSystemMetrics
GetFocus
OpenClipboard
LoadKeyboardLayoutA
SetScrollRange
EnableMenuItem
GetMenuItemCount
EnumChildWindows
IsRectEmpty
SendMessageA
DeleteMenu
IsChild
DestroyCursor
SetForegroundWindow
RegisterWindowMessageA
IsDialogMessageW
LoadIconA
MoveWindow
GetCapture
SetParent
SetActiveWindow
CharToOemA
DrawEdge
MapVirtualKeyA
InsertMenuItemA
GetActiveWindow
GetDesktopWindow
PeekMessageW
GetWindowRect
WindowFromPoint
ScreenToClient
GetMenuState
GetScrollInfo
EqualRect
CallNextHookEx
SetClipboardData
LoadBitmapA
CharNextA
CharLowerA
SetWindowPlacement
AdjustWindowRectEx
SetCursor
DefWindowProcA
IsDialogMessageA
DefFrameProcA
CallWindowProcA
GetKeyboardState
SetMenu
IsWindow
GetIconInfo
PostMessageA
GetDCEx
GetScrollRange
InflateRect
CharLowerBuffA
CheckMenuItem
ClientToScreen
ChildWindowFromPoint
TrackPopupMenu
CharUpperBuffA
IsWindowEnabled
DrawTextA
ScrollWindow
DispatchMessageW
EnumThreadWindows
IsZoomed
GetSysColorBrush
GetForegroundWindow
DispatchMessageA
DestroyMenu
ShowOwnedPopups
PtInRect
MapWindowPoints
GetClassInfoA
GetMenuItemInfoA
kernel32
VirtualAllocEx
GetModuleHandleA
EnumCalendarInfoA
GetStartupInfoA
ExitProcess
GlobalAlloc
WaitForSingleObject
SetEndOfFile
FreeResource
SetLastError
lstrcmpA
FormatMessageA
LoadResource
GetCommandLineA
GetProcAddress
lstrcpyA
SetEvent
shell32
SHGetDesktopFolder
SHGetFolderPathA
Shell_NotifyIconA
version
VerFindFileA
GetFileVersionInfoSizeA
gdi32
GetDIBColorTable
SelectObject
GetPaletteEntries
GetRgnBox
CreateFontIndirectA
BitBlt
CreateBrushIndirect
GetDIBits
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ