Static task
static1
Behavioral task
behavioral1
Sample
adf6b699f71628316061fe2cd0b00978_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
adf6b699f71628316061fe2cd0b00978_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adf6b699f71628316061fe2cd0b00978_JaffaCakes118
-
Size
68KB
-
MD5
adf6b699f71628316061fe2cd0b00978
-
SHA1
0f4fd583f9a73572728d09f3a85ba8e255da8d19
-
SHA256
cc727adceb5f7b66eb8dd4ef949f63f4be59a1bd90256df2bb2b2a7649925925
-
SHA512
08a43893444335f915f7e4fb84a6f989c526e293b9be8fb37cd54c94180f76634f0266f8085502fde2c76a2c5887549cd6957a17860d8751da72b274d2f094a8
-
SSDEEP
768:Che+/2wR/cnoeYiUHCb3O5lPMEvC1R8uvcWkYEfV+cUJcyBVVhdAkUS:Chp/JsoeYQOXPTvhuYYJ7RBVVhdJUS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adf6b699f71628316061fe2cd0b00978_JaffaCakes118
Files
-
adf6b699f71628316061fe2cd0b00978_JaffaCakes118.exe windows:4 windows x86 arch:x86
89ad4c1dfa9b17e059d297ba6b251442
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
MoveWindow
GetWindowRect
SendMessageA
wsprintfA
LoadStringA
FindWindowA
GetDesktopWindow
EndDialog
DispatchMessageA
TranslateMessage
IsDialogMessageA
CreateDialogParamA
RegisterClassA
SetForegroundWindow
PostMessageA
GetDlgItem
InvalidateRect
SetWindowTextA
SetDlgItemTextA
CallWindowProcA
GetScrollPos
GetParent
ReleaseDC
GetDC
GetSystemMetrics
DestroyWindow
GetSysColor
DrawFocusRect
PostQuitMessage
GetWindowLongA
SetWindowLongA
LoadIconA
WinHelpA
LoadCursorA
GetMessageA
DefDlgProcA
MessageBoxA
kernel32
OpenFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetLastError
GetProcAddress
LCMapStringW
LoadLibraryA
GetStdHandle
GetFileType
LCMapStringA
GetOEMCP
GetACP
SetHandleCount
WideCharToMultiByte
GetEnvironmentStringsW
GetCPInfo
GetEnvironmentStrings
MultiByteToWideChar
SetFileAttributesA
CloseHandle
WriteFile
lstrlenA
SetFilePointer
CreateFileA
GetLocalTime
lstrcatA
HeapFree
GetProcessHeap
lstrcpyA
HeapAlloc
HeapDestroy
HeapCreate
LocalFree
FormatMessageA
FreeEnvironmentStringsA
lstrcmpiA
GetModuleFileNameA
UnhandledExceptionFilter
RtlUnwind
ExitProcess
GetVersion
GetCommandLineA
FreeEnvironmentStringsW
GetModuleHandleA
GetStartupInfoA
gdi32
SelectObject
ExtTextOutA
GetTextExtentPoint32A
SetBkColor
SetTextColor
SetBkMode
shell32
ord59
advapi32
RegQueryValueExA
RegUnLoadKeyA
RegLoadKeyA
RegEnumValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegOpenKeyA
RegCloseKey
setupapi
SetupDiDrawMiniIcon
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE