Static task
static1
Behavioral task
behavioral1
Sample
a93a0f6f9477ba88c9de7a06532e6063_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a93a0f6f9477ba88c9de7a06532e6063_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a93a0f6f9477ba88c9de7a06532e6063_JaffaCakes118
-
Size
30KB
-
MD5
a93a0f6f9477ba88c9de7a06532e6063
-
SHA1
de37c76c1ff99b45414400cda50954711994e7d1
-
SHA256
58ac00edb4fa4e6d02eccc565de232340790a320b4820d0f0aac3483b4c3a1bd
-
SHA512
42b14b7489a073bde60fd4e0bd0c0d8eb107e6257278c78328ab449f502f774379114d2262aa0070f09b88fd806b2237918800266ceb04981cb02046cc4ca30e
-
SSDEEP
768:xZsVNhvqVGY9UZ7FQOFGp6nf1Y712vi/NI2UPRy6qUi:xZsLcVGHXFGp6zilWJyPU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a93a0f6f9477ba88c9de7a06532e6063_JaffaCakes118
Files
-
a93a0f6f9477ba88c9de7a06532e6063_JaffaCakes118.exe windows:4 windows x86 arch:x86
dbc21871698b41fa85d020d07aebb313
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadImageA
LoadIconA
GetWindowTextA
GetWindowLongA
GetSubMenu
LoadMenuA
GetCursorPos
GetClientRect
EndDialog
EnableWindow
EnableMenuItem
LookupIconIdFromDirectoryEx
MessageBoxA
SetWindowLongA
SendMessageA
SetWindowPos
SetWindowTextA
TrackPopupMenu
GetDlgItem
DialogBoxParamA
DestroyIcon
CreateWindowExA
CreateIconFromResourceEx
wsprintfA
kernel32
lstrlenA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
SizeofResource
SetFilePointer
ReadFile
LockResource
LocalFree
LoadResource
LoadLibraryExA
GlobalFree
GlobalAlloc
GetVersionExA
GetModuleHandleA
GetModuleFileNameA
GetFileSize
GetFileAttributesA
CloseHandle
CreateFileA
EnumResourceNamesA
ExitProcess
FindResourceA
FreeLibrary
shlwapi
StrRChrA
StrDupA
StrStrIA
shell32
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetFileInfoA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
comctl32
InitCommonControlsEx
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE