?UDIuJHFhjHJJHFiufYIFYiuyfd@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
8dcadb67055c8955b108a3ef9af4a145_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8dcadb67055c8955b108a3ef9af4a145_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8dcadb67055c8955b108a3ef9af4a145_JaffaCakes118
-
Size
244KB
-
MD5
8dcadb67055c8955b108a3ef9af4a145
-
SHA1
24b157a07932b903d2c42a36a11e428b3c1b227a
-
SHA256
5e0160cf17514ff7ed3469cca2ca08b132ac286abc9a07d27e77ffcee40c6106
-
SHA512
6f98af1aa0a4ba65d42adb6713d2c6d8b3d5c41f05f26352da96866b1525c2cd0a9edf367c1bab6ac0d43c3a870c870079fa1d7f423237fc05edfa34935b3533
-
SSDEEP
6144:jSxE4dfSqF139h1PfJJi/PHUsLs6L7kFnj:+dfSqnBnJJMPHUOs60F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dcadb67055c8955b108a3ef9af4a145_JaffaCakes118
Files
-
8dcadb67055c8955b108a3ef9af4a145_JaffaCakes118.exe windows:5 windows x86 arch:x86
433ae9b8e0fad593bed6b11333034e88
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
PropertySheetW
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Read
ImageList_GetIconSize
user32
TileWindows
InternalGetWindowText
DeferWindowPos
BringWindowToTop
GetFocus
DrawMenuBar
ScreenToClient
SetActiveWindow
GetKeyboardLayoutList
GetDC
GetMessageExtraInfo
DialogBoxParamA
CharPrevA
HiliteMenuItem
IsWindowVisible
GetClassInfoExA
GetDCEx
LoadMenuW
AdjustWindowRectEx
SetDlgItemTextW
GetMouseMovePointsEx
WaitForInputIdle
GetUpdateRect
ScrollWindowEx
EnumWindows
CreateCursor
TrackPopupMenuEx
LoadIconW
CharToOemW
GetDlgCtrlID
OemToCharBuffA
InvalidateRect
RegisterClassA
ClipCursor
DefWindowProcA
IsDlgButtonChecked
OpenDesktopW
gdi32
CreateFontIndirectA
PatBlt
SetBkMode
RectVisible
SetROP2
StartDocW
SetAbortProc
CreatePen
SetBkColor
Polyline
GetCurrentPositionEx
EndPath
CreateDIBitmap
GetTextCharsetInfo
DPtoLP
GetPixel
SetWindowOrgEx
kernel32
GetBinaryTypeW
GetCommProperties
AddAtomW
lstrcmpiW
HeapReAlloc
GetSystemDefaultUILanguage
OpenFile
SetThreadExecutionState
LoadLibraryA
GetFileType
SetCurrentDirectoryA
lstrlenW
GetUserDefaultLangID
MoveFileW
GetSystemTimeAsFileTime
FoldStringW
CreateWaitableTimerA
GetSystemDefaultLangID
SetCommTimeouts
ntdll
memcpy
Exports
Exports
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
data Size: 18KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ