?_CreateCaret@@YGPAX_KDI@Z
Static task
static1
Behavioral task
behavioral1
Sample
b440beb695800a2fb383ec6bc3fc3c9d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b440beb695800a2fb383ec6bc3fc3c9d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b440beb695800a2fb383ec6bc3fc3c9d_JaffaCakes118
-
Size
87KB
-
MD5
b440beb695800a2fb383ec6bc3fc3c9d
-
SHA1
28b7e4620b0721df72ccaa4aa35cea25d9a08b04
-
SHA256
1a4b49ab0a0d8437120d83a9ddc97bd0ad4ad175a5cf5ed8a05de53b5f4fc325
-
SHA512
73b9256217ac093fe347a855af17f189ba3f2c98e9610a217d74c359a3caab3484fa7b04fa89512d8074ca885bb493761625ad74bb399c09fb9ee92797d0813a
-
SSDEEP
1536:naMrnhv61PTIwXPhc86kocA0tKV14B9nFmNJ3q+bOMJqVmTLNz:HVoTI8FFopQKMxEK+btt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b440beb695800a2fb383ec6bc3fc3c9d_JaffaCakes118
Files
-
b440beb695800a2fb383ec6bc3fc3c9d_JaffaCakes118.exe windows:5 windows x86 arch:x86
b7da373a366eac1324ffd3e8460f9930
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCmpNIA
StrPBrkW
PathBuildRootW
ord158
ChrCmpIW
PathFindFileNameW
shell32
SHCreateQueryCancelAutoPlayMoniker
kernel32
GetCommConfig
FileTimeToDosDateTime
OpenJobObjectA
SetCommTimeouts
GlobalFlags
GetDllDirectoryA
CancelWaitableTimer
GetHandleInformation
GlobalGetAtomNameA
EraseTape
OpenFileMappingW
lstrcpyA
SearchPathW
CreateMailslotA
lstrcatW
CreateWaitableTimerW
OpenEventA
LoadLibraryExW
FlushFileBuffers
user32
GetMenuStringW
CallNextHookEx
ChangeMenuA
DefDlgProcW
SendNotifyMessageW
CreateDesktopW
EnumDisplaySettingsA
ShowCaret
SetScrollRange
GetMonitorInfoA
SetPropW
GetKeyboardLayoutNameW
SetWindowContextHelpId
SendMessageCallbackW
CreatePopupMenu
CheckRadioButton
SetWindowTextW
DestroyIcon
GetScrollPos
CallWindowProcW
LoadBitmapA
SetCaretPos
gdi32
GetEnhMetaFilePaletteEntries
GetPath
CreateDiscardableBitmap
FixBrushOrgEx
Polyline
GetTextCharacterExtra
GetPaletteEntries
CreateHatchBrush
SetTextColor
ExtSelectClipRgn
GetMetaRgn
CreateEnhMetaFileW
advapi32
AddAuditAccessAce
FindFirstFreeAce
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MData Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ICode Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MConst Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NData Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ