?JHFjhkfjlKLUJFiufiOUuifHLFJHlffgdgf@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
a08e0cbbefcaf0ff84f9d758f9f44b6f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a08e0cbbefcaf0ff84f9d758f9f44b6f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a08e0cbbefcaf0ff84f9d758f9f44b6f_JaffaCakes118
-
Size
258KB
-
MD5
a08e0cbbefcaf0ff84f9d758f9f44b6f
-
SHA1
49501b3610a019b26d05942124caecfe29cab7e3
-
SHA256
0b4659197834abc2489ffeb725c83ffbca5688d9aa88a395cab76c6e11d42211
-
SHA512
06431710e72bd776bd86dd964646154d4af29a6bbd22a4524eecabebf82cb944a57740ebb2055f9f838ff75a97f4923908509566d1e37d1ca73e1545151a6169
-
SSDEEP
6144:33zbERzZvyjlOMPE7MLSQjTFirhI0IMf:nCNvyLFit/Ie
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a08e0cbbefcaf0ff84f9d758f9f44b6f_JaffaCakes118
Files
-
a08e0cbbefcaf0ff84f9d758f9f44b6f_JaffaCakes118.exe windows:5 windows x86 arch:x86
381f434b24e9299fc9bc2515c8eb9d4c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsCharUpperA
SystemParametersInfoW
LoadCursorW
SetMenuItemBitmaps
DrawMenuBar
CreateMenu
wvsprintfW
LockWindowUpdate
SetWindowPlacement
GetClassNameW
ShowWindowAsync
OpenInputDesktop
SetMenuItemInfoW
ToUnicodeEx
GetDCEx
CreateIconIndirect
SetCaretPos
GetDC
OpenIcon
GetKeyboardLayout
ChildWindowFromPointEx
ShowCaret
InflateRect
CharLowerBuffW
DispatchMessageA
CharUpperBuffW
MessageBoxW
CopyAcceleratorTableW
GetWindowTextW
CheckRadioButton
CharLowerW
IsCharLowerA
GetSysColorBrush
GetMessageExtraInfo
DrawIconEx
UnionRect
IsIconic
gdi32
Polyline
WidenPath
GetClipBox
CreateDIBSection
GetBkMode
GetDeviceCaps
EndDoc
SetPaletteEntries
CreateRoundRectRgn
ExtFloodFill
CreateDiscardableBitmap
CombineRgn
GetNearestPaletteIndex
GetCurrentPositionEx
SetTextAlign
GetTextExtentPointA
GetCurrentObject
kernel32
SizeofResource
GetTempFileNameA
DefineDosDeviceW
HeapWalk
GetThreadContext
VerifyVersionInfoW
SetHandleCount
CreateWaitableTimerA
OpenFileMappingA
HeapFree
FlushFileBuffers
SetWaitableTimer
TryEnterCriticalSection
SetEvent
SetHandleInformation
FileTimeToLocalFileTime
EnterCriticalSection
Exports
Exports
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nfodat Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.point Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.temp Size: 1024B - Virtual size: 817B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.port Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ