?MDdklJDILuDOIUUIODIUdiIODoidOPdd@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
b48117f6b0a8f74ecd69441ab45645a3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b48117f6b0a8f74ecd69441ab45645a3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b48117f6b0a8f74ecd69441ab45645a3_JaffaCakes118
-
Size
248KB
-
MD5
b48117f6b0a8f74ecd69441ab45645a3
-
SHA1
59b39c7d60cd5aa8fae2f433fa258ebe06c26c57
-
SHA256
d9c933afdb761714f2cfc362049f12239ea85b8b814ab12407eeaead260d515d
-
SHA512
a211ae02c1b0a00aa6155597bd8795b3ca7172a3f161e9b857a379536eea6f7ffdfbe3ab9577a25de27f1cdae39cc2b1eb2d86a9998e586f0f8d2dc88d82e5ff
-
SSDEEP
6144:rQ52KC6M+kTaIpH4pMoydHrwtOtCBNQxGwf:DKCL+YpH4KoSCO8sx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b48117f6b0a8f74ecd69441ab45645a3_JaffaCakes118
Files
-
b48117f6b0a8f74ecd69441ab45645a3_JaffaCakes118.exe windows:5 windows x86 arch:x86
578d6913b0474982ad1aee024e71da4b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetScrollInfo
BeginPaint
LoadImageA
GetWindowTextLengthW
CharNextW
ScreenToClient
CharToOemBuffA
CheckMenuRadioItem
SetWindowLongW
CharPrevA
IntersectRect
SetWindowRgn
DrawTextA
ScrollWindow
SetDlgItemInt
InsertMenuW
GetLastActivePopup
InsertMenuItemW
GetClipCursor
GetWindowDC
ModifyMenuW
LookupIconIdFromDirectory
GetSysColorBrush
ShowWindowAsync
ShowScrollBar
DestroyCaret
IsDlgButtonChecked
DrawTextW
GetMenuItemID
WaitForInputIdle
DrawStateA
SetScrollRange
DestroyCursor
ClientToScreen
wvsprintfA
CreateAcceleratorTableW
comctl32
ImageList_Remove
ImageList_GetIcon
PropertySheetA
PropertySheetW
InitCommonControlsEx
gdi32
CreateEllipticRgnIndirect
GetFontData
EnumFontFamiliesExW
CreatePatternBrush
GetMapMode
SetStretchBltMode
BeginPath
GetCurrentObject
GetNearestPaletteIndex
GetBrushOrgEx
SetWindowOrgEx
TextOutA
GetObjectA
SaveDC
CreatePalette
OffsetRgn
kernel32
GetSystemTimeAsFileTime
QueryDosDeviceW
SetThreadContext
GetUserDefaultUILanguage
MapViewOfFile
GetModuleHandleA
EscapeCommFunction
GlobalUnlock
lstrcmpA
GlobalAddAtomA
GlobalAddAtomW
OpenSemaphoreW
CompareStringA
GlobalLock
FindCloseChangeNotification
InitializeCriticalSection
GlobalCompact
Exports
Exports
Sections
.text Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.port Size: 47KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dir Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ