__GetWindowTextLengthW@12
Static task
static1
Behavioral task
behavioral1
Sample
8a211bbddead03e620e093d88b448e89_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8a211bbddead03e620e093d88b448e89_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a211bbddead03e620e093d88b448e89_JaffaCakes118
-
Size
168KB
-
MD5
8a211bbddead03e620e093d88b448e89
-
SHA1
3b3f19301e3b3aa1e08a2f6e1516d8a0bdd0d53a
-
SHA256
e9547eee931090c8d7b95174808ed92bfaf55c06ce7f35a884138e93716b7526
-
SHA512
7ca3b969a2f3c39c472eff9a33bd626e03d58ed4cf3acf04c974ee2520c6f75ea7a37189b65592cff7d4c77d1270574ead3ff61498758cdcb0ef0f64af9c9303
-
SSDEEP
3072:PoiiDnKjYUPbQWbEjJVnHCAJIyydQAt53PeY7Z52zKLGOV2DJ:aWYUPbLWJVHCuyrv/WKLm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a211bbddead03e620e093d88b448e89_JaffaCakes118
Files
-
8a211bbddead03e620e093d88b448e89_JaffaCakes118.exe windows:5 windows x86 arch:x86
70f7b08378408bbe20348a5910f418d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ChrCmpIA
PathUndecorateA
StrPBrkA
StrFormatKBSizeW
PathCompactPathW
shell32
ord147
kernel32
lstrcmpA
SetEndOfFile
GetCommProperties
GetSystemPowerStatus
FileTimeToDosDateTime
DeleteTimerQueue
CloseHandle
GetProfileSectionW
GetCommandLineW
QueryDosDeviceW
QueueUserAPC
LoadLibraryExW
CreateMutexW
lstrcpyW
OpenSemaphoreW
OpenMutexW
GetNamedPipeInfo
LoadLibraryW
LockFileEx
user32
EnableMenuItem
GetClassNameW
PeekMessageW
MessageBoxA
DrawFocusRect
GetDC
GetIconInfo
DrawTextExW
GetClientRect
LoadMenuIndirectW
GetMenuStringW
RemovePropA
GetClipCursor
LoadCursorW
KillTimer
ChangeDisplaySettingsExW
GetMessageExtraInfo
GetWindowDC
RemovePropW
ClientToScreen
GetDlgItem
ScrollWindow
DefWindowProcA
IsDlgButtonChecked
WindowFromDC
CreateCaret
ClipCursor
GetMenuInfo
GetSystemMetrics
IsWindowVisible
LoadKeyboardLayoutA
SetScrollInfo
GetScrollPos
GetKeyboardLayoutNameA
DispatchMessageW
TabbedTextOutW
UpdateWindow
GetWindow
SendMessageTimeoutA
gdi32
DPtoLP
GetEnhMetaFileDescriptionA
Chord
SetPolyFillMode
GetPolyFillMode
CreateCompatibleBitmap
EndPath
SetBrushOrgEx
GetDeviceCaps
GetTextMetricsW
GetTextExtentPoint32W
SetLayout
SetTextJustification
GetCharABCWidthsA
ResizePalette
advapi32
IsValidAcl
AddAccessDeniedAce
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.image Size: 1024B - Virtual size: 597B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.memo0 Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_mem Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.datse Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ