GetDirDlgHookProc
Static task
static1
Behavioral task
behavioral1
Sample
b128fa6525c6c7ac67a70bcec4c7144f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b128fa6525c6c7ac67a70bcec4c7144f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b128fa6525c6c7ac67a70bcec4c7144f_JaffaCakes118
-
Size
58KB
-
MD5
b128fa6525c6c7ac67a70bcec4c7144f
-
SHA1
5988dc386ae8d7ef325e6219ab97c7f4b8a996db
-
SHA256
05e5a4b96633463a94e71b46d9dcd7102f4fa9e9efc9bb34c4f77ac572339d45
-
SHA512
59bd98844f31de07554a1fd31e1f376240e08eeadb96585ea5d2705d0aa584163f5d2380e3f9e92714c8ba562b15740ba863a6f5d2dd8ac1448ae3cc86126180
-
SSDEEP
1536:n5xumJVJB0W82yHMXMaNX0S1T8n8HMXMaNX0S1T8nnC:NBV8jHSX0SR88HSX0SR8nC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b128fa6525c6c7ac67a70bcec4c7144f_JaffaCakes118
Files
-
b128fa6525c6c7ac67a70bcec4c7144f_JaffaCakes118.exe windows:4 windows x86 arch:x86
ea7976ed1789fa450876fa66923723b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesA
GetFileAttributesA
lstrcmpA
LocalAlloc
CreateFileA
CloseHandle
GetVolumeInformationA
GetCurrentDirectoryA
ExpandEnvironmentStringsA
GetModuleFileNameA
GetVersionExA
DeleteFileA
SetFileTime
LocalFree
_lclose
GetEnvironmentVariableA
_llseek
WriteFile
RaiseException
IsDBCSLeadByte
lstrcpynA
CreateDirectoryA
lstrlenA
_lread
lstrcpyA
DosDateTimeToFileTime
_lopen
lstrcatA
GetModuleHandleA
GetStartupInfoA
user32
EndDialog
SendDlgItemMessageA
SetFocus
MoveWindow
GetSystemMetrics
SetWindowTextA
GetWindowRect
DialogBoxParamA
IsIconic
DestroyIcon
LoadIconA
EnableWindow
GetDlgItem
SendMessageA
GetDlgItemTextA
BeginPaint
GetDlgCtrlID
PostMessageA
SetDlgItemTextA
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
CharPrevA
EndPaint
GetFocus
DrawIcon
gdi32
SetMapMode
GetMapMode
comdlg32
GetOpenFileNameA
GetFileTitleA
shell32
ShellExecuteA
crtdll
_fmode_dll
_commode_dll
_global_unwind2
__GetMainArgs
memset
strchr
strrchr
_initterm
_local_unwind2
_exit
_XcptFilter
exit
_acmdln_dll
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 440B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 966B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ