Static task
static1
Behavioral task
behavioral1
Sample
969881d6d17c9724c233164bd670e8ab_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
969881d6d17c9724c233164bd670e8ab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
969881d6d17c9724c233164bd670e8ab_JaffaCakes118
-
Size
208KB
-
MD5
969881d6d17c9724c233164bd670e8ab
-
SHA1
745e1494d698fe5355675a1961d90e501c4ed2d1
-
SHA256
0470e25401cdf7cfea8260a27357285c09cc890a720cc01f0d50d43e3854ec03
-
SHA512
1837d870c1a5d96bdb63eccb8853a4081ff5a5debaae9608ae900520439805831d147228b90ee4fb9a1da3be9654869900173347d0042e75048ad76c21723ba8
-
SSDEEP
3072:qU98mp7antHjgW9zPSKyMaoB2apMGTnYSfCp+++vqStU7nMN9vEXdYKHhXWyJ3N4:qU98mpenVgW1Su/vjTYnSkMcrUyJRn3w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 969881d6d17c9724c233164bd670e8ab_JaffaCakes118
Files
-
969881d6d17c9724c233164bd670e8ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
a84347cfae286ba5bff83386f3fbbec2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
BeginPaint
CallNextHookEx
CallWindowProcA
EmptyClipboard
FindWindowA
GetClientRect
GetDCEx
GetDesktopWindow
GetForegroundWindow
GetLastActivePopup
GetMenuStringA
GetScrollRange
IntersectRect
IsWindowEnabled
PeekMessageA
RegisterWindowMessageA
SendMessageA
SetCapture
SetClipboardData
SetFocus
SetScrollPos
TranslateMessage
gdi32
CreateRectRgn
DeleteDC
EnumFontFamiliesW
ExtCreateRegion
ExtFloodFill
ExtTextOutA
FillPath
GetBkMode
GetEnhMetaFileBits
GetROP2
GetStockObject
GetTextFaceA
LineDDA
OffsetViewportOrgEx
SetAbortProc
SetBkMode
SetMapMode
SetMapperFlags
kernel32
CopyFileA
CreateDirectoryA
CreateMutexA
DeleteCriticalSection
GetACP
GetCurrentThread
GetFileSize
GetLocaleInfoA
GetModuleHandleW
GetStringTypeA
GetVersion
InterlockedExchange
IsDebuggerPresent
LoadLibraryW
MultiByteToWideChar
SetCurrentDirectoryA
SetEnvironmentVariableA
SetFilePointer
TlsSetValue
WriteConsoleA
lstrcmpiW
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PU2U61ds Size: 512B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE