Static task
static1
Behavioral task
behavioral1
Sample
7578e1cf067129e03d7f1cae9f47d52d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7578e1cf067129e03d7f1cae9f47d52d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7578e1cf067129e03d7f1cae9f47d52d_JaffaCakes118
-
Size
72KB
-
MD5
7578e1cf067129e03d7f1cae9f47d52d
-
SHA1
97399e9d48cac9f6e49a0e5ed7881b04966732b1
-
SHA256
219b8adae5cc0c57d814b125a13ec643eeca569774ff36a3b76eb2d746fbfbd1
-
SHA512
7923b47b32ba0287d3b2544849f5867061f89c81a20ed7dd57e0e851f93c814d9fb6637a74a46fff6609f706bb7d5f21f1e1de64b86e59405da0fc6efcb7b11a
-
SSDEEP
1536:nbSts0knM8LkXJ65lORKrgkY8TcmNCFxNJHWY:bSts0HgkXJowI/YacmNCFxH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7578e1cf067129e03d7f1cae9f47d52d_JaffaCakes118
Files
-
7578e1cf067129e03d7f1cae9f47d52d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f50751ed28c03d5e0d43220a4b9336f7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetSystemPowerState
GetProcessHeap
FindClose
RemoveDirectoryW
FindFirstFileW
FindNextFileW
TlsGetValue
TlsAlloc
GetCurrentProcess
GetTickCount
WriteConsoleA
GetCurrentDirectoryA
GetLastError
GetStartupInfoA
GetModuleHandleA
user32
SetWindowLongW
IsDialogMessageW
SetWindowTextW
SetTimer
IsIconic
GetParent
FindWindowA
GetWindow
GetDlgItem
GetMenuItemID
SetPropA
FillRect
GetActiveWindow
CreatePopupMenu
GetSysColorBrush
AppendMenuA
DrawFrameControl
PostMessageW
SetWindowsHookExA
version
GetFileVersionInfoSizeA
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
malloc
_strupr
free
_ftol
strstr
time
strncmp
memmove
strchr
atoi
wcslen
exit
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 341KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ