Static task
static1
Behavioral task
behavioral1
Sample
76798f3fb3a66a9b15775d9a4865b5ce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
76798f3fb3a66a9b15775d9a4865b5ce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
76798f3fb3a66a9b15775d9a4865b5ce_JaffaCakes118
-
Size
121KB
-
MD5
76798f3fb3a66a9b15775d9a4865b5ce
-
SHA1
dcf7f9fc7314b77dfce9be75d2972292e87bf4e1
-
SHA256
772788570377bb68dc9a09365d1b8590c4a5ee6e31d1a892f6b9bf1a630afd97
-
SHA512
62651fc0df728b218b587bb5e788f63c497638d07a26e34b6905c0a8488b801e1571912afb0b0a3d7e2b5987558617adc17cb5c435289fbf504a1ee1d48bf8e2
-
SSDEEP
1536:jNxxmEDtqrQ8NSP5re9zSCREd+blIUuKSbT10Zu3hpqlH4:RxQEDtqrQ5re9BS+blIpNtix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76798f3fb3a66a9b15775d9a4865b5ce_JaffaCakes118
Files
-
76798f3fb3a66a9b15775d9a4865b5ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
9dfe3650a0316b3d237fb157b095d9f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDIBColorTable
GetDCOrgEx
CreatePalette
SelectPalette
SetTextColor
GetCurrentPositionEx
user32
RegisterClipboardFormatA
GetKeyboardState
GetKeyboardLayout
SetFocus
IsRectEmpty
InflateRect
OffsetRect
RemoveMenu
IsWindowUnicode
AdjustWindowRectEx
CharUpperBuffA
CallWindowProcA
SetTimer
GetMessagePos
BeginPaint
SendMessageW
GetScrollRange
IsDialogMessageW
DrawIcon
SetActiveWindow
DrawMenuBar
SetScrollPos
SetWindowPlacement
RegisterWindowMessageA
GetDCEx
ShowOwnedPopups
CheckMenuItem
OemToCharA
GetScrollInfo
EnumWindows
SetCapture
CreateWindowExA
IntersectRect
GetPropA
GetDC
GetCursor
GetWindowLongA
GetClassLongA
GetMenuItemCount
SetParent
GetMenuItemInfoA
RegisterClassA
InvalidateRect
CharLowerBuffA
GetActiveWindow
PeekMessageA
DestroyIcon
EmptyClipboard
EnumThreadWindows
LoadIconA
DrawEdge
ChildWindowFromPoint
DefFrameProcA
wsprintfA
PeekMessageW
DestroyWindow
SetWindowTextA
GetWindowTextA
IsZoomed
IsDialogMessageA
GetFocus
SetWindowPos
EndPaint
DrawIconEx
FrameRect
MessageBoxA
WaitMessage
PostMessageA
KillTimer
IsChild
GetMenuState
GetForegroundWindow
DispatchMessageA
DefWindowProcA
SetMenuItemInfoA
RemovePropA
GetKeyNameTextA
LoadCursorA
SetClipboardData
ShowWindow
CharLowerA
GetWindowRect
GetKeyboardType
EnableWindow
SetWindowLongW
GetSysColor
DefMDIChildProcA
DestroyCursor
UnhookWindowsHookEx
OpenClipboard
GetKeyboardLayoutList
FillRect
TranslateMessage
GetCapture
InsertMenuA
kernel32
VirtualAllocEx
SetHandleCount
InitializeCriticalSection
lstrcatA
lstrcpynA
lstrlenA
ReadFile
GetLocalTime
GetCurrentThreadId
VirtualFree
GetEnvironmentStrings
GetModuleHandleA
GetProcAddress
GlobalAddAtomA
LocalFree
SetEvent
ExitProcess
GetOEMCP
shell32
SHGetFileInfoA
version
VerFindFileA
Sections
CODE Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE