Static task
static1
Behavioral task
behavioral1
Sample
a95e523ac148daa20440229b93d80032_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a95e523ac148daa20440229b93d80032_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a95e523ac148daa20440229b93d80032_JaffaCakes118
-
Size
485KB
-
MD5
a95e523ac148daa20440229b93d80032
-
SHA1
7c8673f0950d3d75a0fb52d658124d5d2bff0b22
-
SHA256
4bbc50ec52e43b0e25b05d17a8881e20f7425ae66a87eab39fadb217b1b03380
-
SHA512
c96d75a4eb2537bd1458a5a94d5b6b46a21cfe3b841ffb5c77b1f49e702d486b3a503ed4a3e0e3cdc0528e6c0057f326fb4140edea77619d117f659e963cfb2f
-
SSDEEP
12288:prGTHr3DzhJOBxXK7GRaVur3i62U8no2sMV:pw/DMaCOWe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a95e523ac148daa20440229b93d80032_JaffaCakes118
Files
-
a95e523ac148daa20440229b93d80032_JaffaCakes118.exe windows:4 windows x86 arch:x86
0ad5e84757ffc7692a8edeeb88ed16c5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetRect
DialogBoxParamW
LoadStringW
GetDlgItem
MessageBeep
EnumPropsW
ReleaseDC
SetDlgItemInt
EndDialog
GetDC
SetRectEmpty
EnableWindow
MessageBoxW
wsprintfW
TranslateMessage
DispatchMessageW
IsDlgButtonChecked
PeekMessageW
IsRectEmpty
DestroyWindow
SendMessageW
CheckDlgButton
GetDlgItemInt
CharPrevW
SendDlgItemMessageW
ws2_32
WSAAddressToStringW
lz32
LZClose
gdi32
CreateHalftonePalette
CreatePalette
winmm
mmioOpenW
mmioSeek
mmioClose
mmioWrite
mmioRead
kernel32
GetLastError
Beep
VirtualAlloc
advapi32
RegOpenKeyA
RegCloseKey
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegQueryValueExA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 461KB - Virtual size: 461KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ