dF81bqY_B0g3@20
Static task
static1
Behavioral task
behavioral1
Sample
8690dc7cd31771f4c1d1a843ec2e0e18_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8690dc7cd31771f4c1d1a843ec2e0e18_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8690dc7cd31771f4c1d1a843ec2e0e18_JaffaCakes118
-
Size
127KB
-
MD5
8690dc7cd31771f4c1d1a843ec2e0e18
-
SHA1
2aed6b630338452f505cce247f417216b01bf502
-
SHA256
fc90603c5ea0c17603e9fd309681f07a6361efba21e5fdd3a0e14290f4e5d155
-
SHA512
2615c8ffaf9cd7c786bdafebaba00878e23f67c60d27a56728adbf1786d7d2a78e292f13ae57445f5e7e2f77f983b92ae84c1e65437d56d2fc0358082d8825b4
-
SSDEEP
3072:V3f0gUxrIwptEjFheBqccv3hc+T7tzPwwoCLjsShZ3+BZZoijf3W8W:pzc0EUCBNghX3NPtoCHpj3KDm9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8690dc7cd31771f4c1d1a843ec2e0e18_JaffaCakes118
Files
-
8690dc7cd31771f4c1d1a843ec2e0e18_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d34f27666a6a20608c9c1f569cbefeb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
Shell_NotifyIconW
oleaut32
SysStringLen
SysAllocStringLen
msvcrt
srand
wcschr
memmove
malloc
memset
wcstol
tolower
calloc
wcsncmp
rand
ole32
CoGetContextToken
CreateOleAdviseHolder
CoUnmarshalInterface
CoCreateFreeThreadedMarshaler
CoRevokeClassObject
OleRegGetUserType
ReleaseStgMedium
MkParseDisplayName
PropVariantClear
comctl32
ImageList_GetBkColor
ImageList_Write
ImageList_Draw
ImageList_Create
ImageList_Remove
ImageList_Add
comdlg32
GetSaveFileNameA
FindTextA
ChooseColorA
GetFileTitleA
GetOpenFileNameA
user32
wsprintfA
WindowFromPoint
InsertMenuA
DrawIconEx
UnhookWindowsHookEx
LoadIconA
SetParent
IsDialogMessageA
CharUpperBuffA
LoadKeyboardLayoutA
GetSystemMenu
GetCapture
DispatchMessageW
GetClassNameA
CreateMenu
SendMessageA
EnableMenuItem
GetSysColorBrush
FindWindowA
SetScrollInfo
IsCharUpperA
LoadStringA
IsWindowEnabled
GetCursor
CloseClipboard
MoveWindow
IsWindowVisible
IsChild
SetClipboardData
SetActiveWindow
EqualRect
LoadCursorA
SetWindowsHookExA
GetDlgItem
GetWindowRect
IsDlgButtonChecked
GetWindowThreadProcessId
GetMenuItemID
ScrollWindow
CharLowerBuffA
OpenIcon
MapVirtualKeyA
SetScrollPos
GetKeyboardLayout
GetKeyboardLayoutNameA
GetMessagePos
AdjustWindowRectEx
SetCapture
GetWindowDC
GetFocus
SetWindowLongA
GetSystemMetrics
CharUpperA
SetMenuItemInfoA
KillTimer
GetWindowLongA
IsWindow
DrawFrameControl
EnumThreadWindows
SetFocus
CharLowerA
GetKeyboardState
GetIconInfo
OemToCharA
GetKeyState
EmptyClipboard
PeekMessageW
UnregisterClassA
GetKeyboardLayoutList
ClientToScreen
RegisterWindowMessageA
DrawMenuBar
GetForegroundWindow
InvalidateRect
IsZoomed
GetDC
MessageBeep
EnumWindows
InflateRect
EnableScrollBar
DeleteMenu
IsCharLowerA
FillRect
GetMenu
EnumChildWindows
ReleaseCapture
SetTimer
ShowScrollBar
DrawEdge
GetMenuStringA
IntersectRect
SetForegroundWindow
PostQuitMessage
UpdateWindow
gdi32
GetTextAlign
SetPixel
version
VerFindFileA
VerInstallFileA
kernel32
GetOEMCP
GlobalAlloc
GetProcAddress
GetStartupInfoA
LoadLibraryA
VirtualAllocEx
GetProcessHeap
ExitProcess
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
.data
-
.rdata
-
.rsrc/0/DIALOG/TEXTFILEDLG
-
.rsrc/0/MANIFEST/1.xml
-
.rsrc/0/RCDATA/DVCLAL
-
.rsrc/0/STRING/4094
-
.rsrc/0/STRING/4095
-
.rsrc/1033/BITMAP/BBABORT.bmp
-
.rsrc/1033/version.txt
-
.text