Static task
static1
Behavioral task
behavioral1
Sample
a3d5d3b0c7a8039ae991783bcbcf9e3e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a3d5d3b0c7a8039ae991783bcbcf9e3e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3d5d3b0c7a8039ae991783bcbcf9e3e_JaffaCakes118
-
Size
177KB
-
MD5
a3d5d3b0c7a8039ae991783bcbcf9e3e
-
SHA1
523e8d1ea3e5bf5760031d9a5d71aa996ea9e78d
-
SHA256
585e53812f02be43d530381928ce439898471fd9374c8b932b05cbe64ffee29d
-
SHA512
a272ac76528bb0a6682a854786546c687cc18aea101090b0ff42f81cff6b6cae3bcd6153bb8e3c1e309627a0d3413d19f4ad2f7d0cd82d26e1141077e861f616
-
SSDEEP
3072:0jXlt8JJTd46Yy5jzuXWNbklGOCXAVD8cmbc6Bt1C:0haTGszuXWFRAVD8rC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3d5d3b0c7a8039ae991783bcbcf9e3e_JaffaCakes118
Files
-
a3d5d3b0c7a8039ae991783bcbcf9e3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
6faf969ef9527072e33be70a6cfd458a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
CreateCompatibleBitmap
MoveToEx
ExtCreateRegion
DeleteObject
GetCharWidthW
SetViewportOrgEx
LineTo
CreateSolidBrush
CreatePen
CreateDCW
CreateFontW
SelectObject
SetBkColor
CreatePatternBrush
BitBlt
CombineRgn
StretchBlt
SetViewportExtEx
DeleteDC
SetBkMode
GetDeviceCaps
GetObjectW
CreateCompatibleDC
GetTextMetricsW
SetTextColor
CreateDIBSection
GetStockObject
kernel32
FreeLibrary
MoveFileW
GetVDMCurrentDirectories
WriteFile
ExitProcess
GetCurrentProcessId
SetThreadPriorityBoost
OutputDebugStringW
GetProcAddress
LoadLibraryW
GetLocalTime
DeleteFileW
EnumResourceNamesW
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
GetModuleHandleA
CreateProcessW
ReadFile
HeapAlloc
SetFilePointer
SetUnhandledExceptionFilter
FindClose
GetUserDefaultUILanguage
FindFirstFileW
HeapFree
user32
AdjustWindowRect
GetWindowRect
GetWindowLongW
GetDlgItem
MoveWindow
EndDialog
GetWindowInfo
MessageBoxW
SetRect
SetWindowTextW
GetMenuStringW
SetWindowsHookExW
GetSysColor
SendMessageW
shell32
ShellExecuteW
comctl32
ImageList_ReplaceIcon
ImageList_Draw
ImageList_Create
ImageList_Destroy
comdlg32
GetSaveFileNameW
advapi32
RegSetValueExW
RegEnumKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteKeyA
msvfw32
ICInfo
Sections
.text Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 1024B - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ