_4Q4lMO97YO@16
Static task
static1
Behavioral task
behavioral1
Sample
a61dd3a91835034ea09f673546b1cb7b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a61dd3a91835034ea09f673546b1cb7b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a61dd3a91835034ea09f673546b1cb7b_JaffaCakes118
-
Size
128KB
-
MD5
a61dd3a91835034ea09f673546b1cb7b
-
SHA1
018aa40d46bae871b33e0d50075ded488a0d2b72
-
SHA256
49766d9330fb269545eff1c7e728f853013005fd270ef0e4468423ede6da7358
-
SHA512
6881229199befe0690207814081e16c17f646c3e2d88b78eb3fb03cb7c52ffa3ace50cb948e180fe190cea65c1dd44883e7290664f48e8b0cf7337f440d6ae95
-
SSDEEP
3072:jG6aP5OrUAHVb8+GMO5HEFulyWMsZmjW1i2czis:jLA6HKeO5OEyW7ZxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a61dd3a91835034ea09f673546b1cb7b_JaffaCakes118
Files
-
a61dd3a91835034ea09f673546b1cb7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
591d00e06175968039028a65150b20c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Create
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Draw
ImageList_DrawEx
ImageList_Read
ImageList_Write
ImageList_GetBkColor
ImageList_Remove
ole32
CoCreateFreeThreadedMarshaler
user32
CreateWindowExA
GetClassInfoA
IsZoomed
GetSubMenu
DefWindowProcA
RegisterClipboardFormatA
GetSysColor
IsWindowEnabled
PostMessageA
GetScrollPos
DrawMenuBar
GetWindowRect
EndDialog
IsDialogMessageW
ReleaseCapture
LoadIconA
GetMenuItemID
SetScrollInfo
CharUpperBuffA
SetMenu
CharNextA
LoadCursorA
GetDC
GetMenu
GetWindowLongW
GetKeyboardState
IsCharLowerA
MapWindowPoints
FindWindowA
GetClientRect
ShowOwnedPopups
OpenIcon
PtInRect
GetWindowDC
CheckMenuItem
DestroyWindow
GetSysColorBrush
GetKeyboardType
SetWindowTextA
GetWindowPlacement
GetScrollInfo
GetKeyboardLayout
GetMenuItemCount
CharLowerBuffA
SetScrollPos
GetWindow
EndPaint
KillTimer
ChildWindowFromPoint
EnumChildWindows
GetForegroundWindow
GetDesktopWindow
GetCursorPos
GetPropA
IsChild
MsgWaitForMultipleObjects
EnumThreadWindows
CreatePopupMenu
SetCapture
PeekMessageA
DrawIconEx
kernel32
Sleep
GetSystemDefaultLangID
GetCurrentThread
GetStartupInfoA
FindClose
LoadResource
GetCurrentProcessId
WaitForSingleObject
VirtualAllocEx
lstrcatA
ExitProcess
GetCurrentProcess
GetVersionExA
lstrcmpiA
lstrlenW
LoadLibraryA
MulDiv
IsBadReadPtr
LocalReAlloc
GetCommandLineW
GetACP
GetProcAddress
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.badata Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ