Static task
static1
Behavioral task
behavioral1
Sample
afbf0bda63a65ec2feea124abb2a7080_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
afbf0bda63a65ec2feea124abb2a7080_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
afbf0bda63a65ec2feea124abb2a7080_JaffaCakes118
-
Size
348KB
-
MD5
afbf0bda63a65ec2feea124abb2a7080
-
SHA1
469d4d0d7bc762734c1f567d143b90d6310ecbdb
-
SHA256
5294e08a3c4c63e6c512f75d2d3f6a4439f74848f49c17b48324d15b0b361d53
-
SHA512
0f5198fe22e41d33f5a0d452e0d2842f5557b91c034d552cb0db4deab3d3e54b2104f66ad9d9e25964a564061435c02113b5c694a89c4150d12b5111ab126912
-
SSDEEP
6144:rguLZsYlhgvTTBUro354dTQBo7iz2wzdcyNDgpy3gYxd1PQB2UysKVkN3YCV7:rgeqBw24dQ1znupx8IB2Ug8dx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afbf0bda63a65ec2feea124abb2a7080_JaffaCakes118
Files
-
afbf0bda63a65ec2feea124abb2a7080_JaffaCakes118.exe windows:4 windows x86 arch:x86
34427b55aff6404ca2ae11dae484f3b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MapDialogRect
SetCapture
OffsetRect
EndDialog
CloseClipboard
GetMessageA
FindWindowA
GetWindowTextA
EnumChildWindows
GetAsyncKeyState
GetDC
GetClassNameA
UpdateWindow
GetMessagePos
LoadIconA
winfax
FaxSetGlobalRoutingInfoA
FaxSetConfigurationA
FaxSetLoggingCategoriesA
FaxSetPortA
FaxSendDocumentA
FaxSendDocumentForBroadcastA
FaxRegisterServiceProviderW
FaxRegisterRoutingExtensionW
FaxPrintCoverPageA
FaxOpenPort
FaxInitializeEventQueue
FaxGetRoutingInfoA
FaxGetPortA
FaxGetPageData
FaxGetLoggingCategoriesA
FaxGetJobA
FaxGetDeviceStatusA
FaxGetConfigurationA
FaxSetJobA
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
??2@YAPAXI@Z
memcpy
kernel32
GetStartupInfoA
VirtualProtectEx
PrepareTape
GetModuleFileNameA
GetCurrentProcessId
ExitProcess
LoadLibraryA
LockResource
GetDateFormatA
GetModuleHandleA
GetVersionExA
OpenProcess
GetSystemTime
GetWindowsDirectoryA
CreateFileA
QueryPerformanceCounter
GetSystemInfo
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 228KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ