Static task
static1
Behavioral task
behavioral1
Sample
707600a567ed797e41c69d25d8734ec9_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
707600a567ed797e41c69d25d8734ec9_JaffaCakes118
-
Size
331KB
-
MD5
707600a567ed797e41c69d25d8734ec9
-
SHA1
f64237ac829a6c3b15617d0292255dfdbdcc6b7f
-
SHA256
7ef69d0d2384e23553117d5952b66d3af10a0d394a09a8cdb237c52baad0e1de
-
SHA512
889e8000a6881fb70252db42e8661df44ce81971cdcdb3902363ba826998963525108f8b295bdb422e7becfa408160483b318abceda5dbf3420ed406a5054773
-
SSDEEP
6144:b2c/CRaW3W9HZo8qoABz81PiUZDDXLmzhJ9A0bDmJ:bjxvo8qoAlIDzLmFwMS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 707600a567ed797e41c69d25d8734ec9_JaffaCakes118
Files
-
707600a567ed797e41c69d25d8734ec9_JaffaCakes118.exe windows:4 windows x86 arch:x86
7fe40850163133ff2557aa26ba343bdd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetNextDlgGroupItem
SetDlgItemTextA
GetForegroundWindow
ShowWindow
GetParent
GetNextDlgTabItem
CreateWindowExA
IsWindowVisible
MessageBoxIndirectA
GetLastActivePopup
GetWindow
MessageBoxA
EndDialog
GetWindowRect
ShowWindowAsync
ole32
MkParseDisplayName
oledlg
ord2
ord10
ord9
ord6
ord7
ord11
ord1
ord8
ord3
ord5
ord4
ord12
oleaut32
LHashValOfNameSysA
comctl32
PropertySheetW
ord4
DrawStatusTextW
CreatePropertySheetPageA
ord2
ord17
shlwapi
StrStrA
StrCmpNA
StrRChrIW
StrToIntA
StrRStrIW
kernel32
DeleteCriticalSection
HeapUnlock
LocalSize
HeapLock
CompareStringA
GetModuleHandleA
GetNumberFormatA
FoldStringA
GetStartupInfoA
PulseEvent
CreateMutexA
GlobalLock
GlobalMemoryStatus
GetOverlappedResult
GetProcAddress
VirtualAlloc
ResetEvent
msvcrt
_pctype
_isctype
__mb_cur_max
perror
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_controlfp
_except_handler3
__set_app_type
__p__fmode
iswctype
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 218KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ