Static task
static1
Behavioral task
behavioral1
Sample
a54e7e09d48806c1ea33c1ab67b21be9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a54e7e09d48806c1ea33c1ab67b21be9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a54e7e09d48806c1ea33c1ab67b21be9_JaffaCakes118
-
Size
92KB
-
MD5
a54e7e09d48806c1ea33c1ab67b21be9
-
SHA1
5a818f679fab6c790181bc82d4f1b40a8bcf52d5
-
SHA256
9e77f2693dd96906662525e10dd0bfabd35c6c2f615075286169e53568aa015f
-
SHA512
d50d148b5ed9a1a730cf215d81f22516aef996ce7a408fbac09670d4f9ae7948e4a7c66c1ece7e352fe3dc76bda276629259cd75ce2da8f1cb78291fe840a3d7
-
SSDEEP
1536:T/YdKwB2Fh3Pqp1InKoinTfRIiAazuwgkLRF9sIaO2resCCZ04nDHStV:0KwB8PoGritzAazuRkh32re/erStV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a54e7e09d48806c1ea33c1ab67b21be9_JaffaCakes118
Files
-
a54e7e09d48806c1ea33c1ab67b21be9_JaffaCakes118.exe windows:5 windows x86 arch:x86
00e23ade7126719430527b906d73eb45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
__getmainargs
_exit
sqrt
__setusermatherr
exit
_acmdln
_XcptFilter
__p__fmode
__set_app_type
_adjust_fdiv
_initterm
_except_handler3
kernel32
VirtualProtect
GetModuleHandleA
user32
GetIconInfo
GetMenuStringA
SetPropA
CallWindowProcA
SetClipboardData
SetWindowPos
GetClientRect
WinHelpA
PtInRect
IsWindowVisible
EmptyClipboard
GetScrollPos
EnableWindow
DefWindowProcA
GetWindow
DispatchMessageA
SetForegroundWindow
DestroyIcon
wsprintfA
GetDC
GetMenu
ReleaseCapture
UpdateWindow
LoadIconA
PostQuitMessage
SetWindowLongA
GetScrollRange
ShowOwnedPopups
DialogBoxParamA
ScrollWindow
GetWindowTextA
SetScrollRange
SetWindowTextA
GetCursorPos
GetKeyState
RemovePropA
SetScrollPos
GetForegroundWindow
EnableMenuItem
LoadCursorA
FillRect
GetCapture
GetScrollInfo
BeginPaint
GetWindowLongA
CreatePopupMenu
ClientToScreen
InflateRect
UnregisterClassA
SendDlgItemMessageA
KillTimer
CharLowerA
DrawIcon
SetCursor
DrawIconEx
TrackPopupMenu
SendMessageA
GetMessageA
SetClassLongA
CharNextA
GetKeyboardType
SetMenu
GetWindowPlacement
EqualRect
GetSystemMetrics
ShowWindow
MessageBeep
PostMessageA
SystemParametersInfoA
EndDialog
IsWindow
DrawEdge
SetWindowPlacement
InvalidateRect
ScreenToClient
LoadBitmapA
FrameRect
WindowFromPoint
IntersectRect
RegisterClipboardFormatA
DestroyMenu
OffsetRect
GetWindowThreadProcessId
GetSysColor
GetTopWindow
CallNextHookEx
ReleaseDC
IsIconic
DrawMenuBar
LoadStringA
GetDCEx
GetMenuItemID
GetSubMenu
FindWindowA
RegisterClassA
GetPropA
GetParent
DestroyWindow
TranslateMessage
SetActiveWindow
GetSysColorBrush
ShowCursor
RegisterWindowMessageA
CreateMenu
GetMenuState
DeleteMenu
IsWindowEnabled
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE