Static task
static1
Behavioral task
behavioral1
Sample
a081741e4345fa4eab9e9039f6b6596f_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a081741e4345fa4eab9e9039f6b6596f_JaffaCakes118
-
Size
431KB
-
MD5
a081741e4345fa4eab9e9039f6b6596f
-
SHA1
4ce04e10a8eafd04b9a5082248b77d421a25efaa
-
SHA256
da38892f8120545b4e8b1741beea162d365d0ed4e469326297d63929e080f37b
-
SHA512
79a2546f0448f126ba9bb2c4dbaea067924fc1464c850a5a44c54eba11341627a68a6188073ee1918d33ec93db4d8e1737ade6a76829f4182402d4d842e9dda8
-
SSDEEP
12288:FFzlcGMZdjUIPK+RAph+7YVn6omVjx73Myy:FFzlPMZdwIC+GpfVn6oCTJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a081741e4345fa4eab9e9039f6b6596f_JaffaCakes118
Files
-
a081741e4345fa4eab9e9039f6b6596f_JaffaCakes118.exe windows:4 windows x86 arch:x86
95bf70a969bbf0d7c20388bb2378874f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumThreadWindows
CloseWindow
IsDialogMessageA
IsZoomed
SetSysColors
ArrangeIconicWindows
FindWindowExA
GetForegroundWindow
MessageBoxIndirectA
EndDialog
GetWindow
GetClientRect
SetWindowTextA
GetDlgItemInt
ole32
CLSIDFromProgID
oleaut32
LHashValOfNameSysA
gdi32
BitBlt
Chord
CopyEnhMetaFileW
AddFontResourceA
CreateDiscardableBitmap
CloseEnhMetaFile
Arc
CancelDC
CreateDCW
CloseMetaFile
ChoosePixelFormat
CreateCompatibleBitmap
advapi32
RegCloseKey
RegOpenKeyExA
RegCreateKeyA
RegNotifyChangeKeyValue
RegQueryInfoKeyA
RegOpenKeyA
RegRestoreKeyA
RegSetValueExA
RegEnumValueA
RegQueryValueExA
RegSaveKeyA
RegUnLoadKeyA
kernel32
GetStartupInfoA
VirtualAlloc
GetStdHandle
GetProcAddress
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
GetModuleHandleA
WriteProfileSectionA
msvcrt
_exit
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 275KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ