Static task
static1
Behavioral task
behavioral1
Sample
a33afcc859fa2eec93e39f43e1b3c905_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a33afcc859fa2eec93e39f43e1b3c905_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a33afcc859fa2eec93e39f43e1b3c905_JaffaCakes118
-
Size
32KB
-
MD5
a33afcc859fa2eec93e39f43e1b3c905
-
SHA1
bf587dce6108e7e37422b73a9c6f8f209e581236
-
SHA256
c24474796be3530efe9b8ef5612056134b08fff7d83e51de99be3f75e38d47be
-
SHA512
33389eb717cbe3d9d09ee8b03c6fa549dbd1dc4f7c103750659e12f6b34a17ec6f980166efa6fe5af5e861dead4fc4d8076ddf0df8b187332bc18c2d8874affb
-
SSDEEP
384:TwMMz5Sljnhl7TLyQlTtUAIFIryYipwo9n:TDtelarlo9n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a33afcc859fa2eec93e39f43e1b3c905_JaffaCakes118
Files
-
a33afcc859fa2eec93e39f43e1b3c905_JaffaCakes118.exe windows:4 windows x86 arch:x86
3637eb45131fdf15edfd6ed034624aa0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
lstrcpyA
lstrlenA
lstrcmpiA
FlushInstructionCache
HeapCreate
HeapDestroy
DeleteCriticalSection
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetSystemInfo
GetVersionExA
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetCommandLineA
ExitProcess
GetStartupInfoA
GetCurrentProcess
GetModuleHandleA
RtlUnwind
user32
IsWindow
GetWindowTextA
GetWindowTextLengthA
GetParent
GetWindowLongA
GetClassNameA
SetWindowLongA
ScreenToClient
GetCursorPos
ReleaseCapture
GetCapture
SetCapture
SetFocus
SetCursor
PtInRect
InvalidateRect
BeginPaint
FillRect
EndPaint
SetWindowPos
GetDC
SystemParametersInfoA
GetWindowRect
GetWindow
CreateWindowExA
DrawFocusRect
GetFocus
CallWindowProcA
DrawTextA
ReleaseDC
DestroyCursor
DefWindowProcA
SetRectEmpty
GetSystemMetrics
LoadImageA
SendMessageA
GetDlgItem
SetWindowTextW
EndDialog
GetActiveWindow
MapWindowPoints
GetClientRect
CharNextA
RegisterWindowMessageA
MessageBoxA
DialogBoxParamA
DestroyWindow
CreateCursor
gdi32
SetTextColor
DeleteDC
GetObjectA
CreateFontIndirectA
SetBkMode
DeleteObject
SelectObject
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteA
ole32
CoUninitialize
CoInitialize
comctl32
InitCommonControlsEx
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ