Static task
static1
Behavioral task
behavioral1
Sample
a9d01938b1e99089a061e66a0b472abb_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a9d01938b1e99089a061e66a0b472abb_JaffaCakes118
-
Size
160KB
-
MD5
a9d01938b1e99089a061e66a0b472abb
-
SHA1
194d64e9dcafcbf2518d7981e092c3ca6a49fe48
-
SHA256
921ff2fcfac0aa8e5808c832907d5ec891c50ab15cab07d58148b61f1d8262c8
-
SHA512
82542b1f3ad6d80cada76fe2867ff3f2820ff8d9ae53396b359f24ea7311cd6248a6e7e335ef6539abed44a0ebd6ab5c930232e10f6901264925c811ba1f15a4
-
SSDEEP
3072:+QHJat0UEdj3KN/aKLFNW7laWkLYmyurO0qsCWGFptjqUxXEFvU/QI:r0t45KZp/OoqWO0CWQtxXE6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9d01938b1e99089a061e66a0b472abb_JaffaCakes118
Files
-
a9d01938b1e99089a061e66a0b472abb_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b069591f475ace70d606b53929c1ecd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseFontW
FindTextW
GetFileTitleW
GetSaveFileNameA
GetSaveFileNameW
LoadAlterBitmap
PrintDlgExA
ReplaceTextA
ReplaceTextW
WantArrows
dwLBSubclass
user32
CreateDialogParamA
CreateWindowExA
DeferWindowPos
DrawEdge
DrawMenuBar
DrawTextA
FindWindowExA
GetClassLongA
GetFocus
ModifyMenuA
MoveWindow
OpenClipboard
RedrawWindow
SetCursor
kernel32
GetLastError
CreateEventW
CloseHandle
CancelIo
BuildCommDCBA
DeleteFileW
ExitProcess
lstrlenA
TlsGetValue
LocalUnlock
HeapCreate
HeapAlloc
GetVersionExA
GetStartupInfoA
GetProcessHeaps
GetPrivateProfileStructA
GetOEMCP
GetModuleHandleA
FreeEnvironmentStringsW
GetFileSize
GetDiskFreeSpaceA
GetCommandLineA
GetACP
CreateNamedPipeW
ole32
CoGetMalloc
CoCreateGuid
CoCreateInstance
dbghelp
SymGetSymFromAddr64
SymGetModuleInfoW
SymGetModuleBase
SymGetSymFromName
SymGetSymPrev
SymMatchFileName
dbghelp
SymGetLineNext
SymGetModuleBase64
SymEnumerateSymbols64
MiniDumpWriteDump
GetTimestampForLoadedLibrary
ImageNtHeader
MiniDumpReadDumpStream
comctl32
FlatSB_SetScrollProp
ImageList_BeginDrag
ImageList_Duplicate
ImageList_GetIconSize
ImageList_LoadImageA
FlatSB_SetScrollPos
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE