Static task
static1
Behavioral task
behavioral1
Sample
7157a0b6244b8ad190ff8686104a5dfb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7157a0b6244b8ad190ff8686104a5dfb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7157a0b6244b8ad190ff8686104a5dfb_JaffaCakes118
-
Size
134KB
-
MD5
7157a0b6244b8ad190ff8686104a5dfb
-
SHA1
838da6c7ab9ad8fb48afe3fbdb82adb208ab93d8
-
SHA256
6d452b130ec5dafc1c4f3795328f55f214ccef5fe5431e84b80613e59f14581d
-
SHA512
810e26a8cc632b27bea047e02bac544eec8ff25acc9ef3cacf9895d1edeb435938c40ddc00ab8276bcc30812b8ac611149007dad7d027dd6742fbba7d6a96374
-
SSDEEP
3072:Iayi8c1F2F6Lp66drlGq7/wj8qJ8sPB5MdWogjBZocb1Zf:Iay4SULpTzYj8qJ8s3MuFWk1Zf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7157a0b6244b8ad190ff8686104a5dfb_JaffaCakes118
Files
-
7157a0b6244b8ad190ff8686104a5dfb_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6ce55750352f79c029060e01015b85d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
LoadLibraryExA
lstrcpynW
CancelTimerQueueTimer
GetComputerNameExW
GetModuleHandleW
GetUserDefaultLangID
DeleteFileW
GetNumberFormatA
lstrcpy
VirtualAllocEx
ConnectNamedPipe
lstrcmpW
user32
PostMessageW
DialogBoxParamW
BeginPaint
GetFocus
EndPaint
DialogBoxParamA
TranslateMessage
GetDlgItem
GetSysColor
LoadCursorA
SetWindowPos
LoadStringW
SetWindowTextA
GetWindowRect
CreateWindowExW
IsCharLowerA
LoadStringA
DialogBoxParamW
DispatchMessageA
GetDlgItemTextW
SendDlgItemMessageA
SendMessageW
DefWindowProcW
SetWindowLongA
CreateWindowExA
SetDlgItemInt
GetDC
GetSystemMetrics
LockWindowUpdate
CreateWindowExW
IsWindow
CharNextExA
DefWindowProcA
GetDlgItemInt
GetClientRect
SetTimer
SetForegroundWindow
GetWindowLongW
SetCursor
ShowWindow
GetDesktopWindow
InvalidateRect
wsprintfA
SetDlgItemTextA
gdi32
FrameRgn
GetCurrentObject
CreateBitmap
Polygon
SetRectRgn
TextOutW
FlattenPath
EqualRgn
advapi32
RegDeleteKeyW
RegCreateKeyExA
RegQueryValueW
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ