Static task
static1
Behavioral task
behavioral1
Sample
8659cf04b89f1bf53e4edb3055e080e3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8659cf04b89f1bf53e4edb3055e080e3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8659cf04b89f1bf53e4edb3055e080e3_JaffaCakes118
-
Size
155KB
-
MD5
8659cf04b89f1bf53e4edb3055e080e3
-
SHA1
d2281ec4a62409ac9e0f75afc7fbc707d6f2316c
-
SHA256
51664e3b7f4aa73345ebbb85dc493b702aa1440b8a6b4910e1edd61333382b1f
-
SHA512
3671f67ec97c8a75c9ddf0b5980e45b6c770ed208597171a13dd89952e2207c1e886ee159f91b4d88e6f98cce866696e296bd64e21fbe32dd2c8c6ede2d17f87
-
SSDEEP
3072:FpyaF593qheRCUJXJvWSd6qeB142jByfMxJZVAqPvWJ:FptFqMCU2/VB142FnhV7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8659cf04b89f1bf53e4edb3055e080e3_JaffaCakes118
Files
-
8659cf04b89f1bf53e4edb3055e080e3_JaffaCakes118.exe windows:5 windows x86 arch:x86
d5b5d11ddc1f79c182d4a9615b0c83cd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetLastError
LoadLibraryW
LoadLibraryA
user32
CheckRadioButton
CreateWindowExW
DefWindowProcW
DialogBoxParamW
DrawFocusRect
EnableMenuItem
EndDialog
FrameRect
GetDC
GetDlgItem
CharUpperBuffW
GetKeyState
GetWindowLongW
IsCharAlphaW
IsDlgButtonChecked
LoadCursorW
LoadStringW
MessageBoxW
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
SetWindowLongW
TranslateAcceleratorW
UnhookWindowsHookEx
CallWindowProcW
GetDlgItemTextW
advapi32
RegOpenKeyExW
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52361 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52362 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52363 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52364 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52365 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52366 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data67 Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 950B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ