Static task
static1
Behavioral task
behavioral1
Sample
b98a5038763a799729c82738d4c67706_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b98a5038763a799729c82738d4c67706_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b98a5038763a799729c82738d4c67706_JaffaCakes118
-
Size
31KB
-
MD5
b98a5038763a799729c82738d4c67706
-
SHA1
2b6febd4482b7290ef2dadf8955b3fa8cf9c0fe6
-
SHA256
4869128c8b7d3ae7b58e45602f8f2d43eb87bc9266d0c81526e82f82cfa54efe
-
SHA512
6623821718fc352cb7715dd3414e72a0878ebe5a71b21f51a4b81555115ba7a63cb3b04223a5126d0988a8cf635a92b6f7da9a84a7bee0a33fe423faba48b6bc
-
SSDEEP
384:Ka8m9bRI8+MEDSwW9LTrsJsvceloLLRMXLYhXk4yOy3FYOQF:n8rgEDSwW9LT4JIqfRMMu4y53+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b98a5038763a799729c82738d4c67706_JaffaCakes118
Files
-
b98a5038763a799729c82738d4c67706_JaffaCakes118.exe windows:4 windows x86 arch:x86
73271a95e822cb7950637ef50e9c988b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyIcon
DialogBoxParamW
GetDC
GetWindowTextLengthA
GetDlgItem
CreateIcon
IsMenu
DialogBoxParamA
CopyRect
DrawTextA
IsWindow
DrawIcon
CloseWindow
GetCursor
GetWindowTextA
GetFocus
GetMenu
LoadMenuA
InsertMenuA
DrawTextW
EndDialog
kernel32
GetOEMCP
lstrcatA
GetCPInfo
GetStringTypeW
GetCommandLineA
GetStdHandle
lstrcpynA
MultiByteToWideChar
GetStringTypeA
GetVersion
GetACP
TerminateProcess
lstrcpynW
GetModuleFileNameA
LCMapStringW
SetHandleCount
CreateFileA
GetFileType
GetStartupInfoA
WriteFile
lstrcpyA
GetCurrentProcess
SetFilePointer
LCMapStringA
comctl32
ImageList_AddIcon
DllGetVersion
CreateToolbarEx
ImageList_DragEnter
MenuHelp
CreateToolbar
InitCommonControls
ImageList_LoadImageW
DrawStatusTextW
ImageList_GetIcon
advapi32
RegEnumKeyW
RegCreateKeyExA
RegEnumKeyExW
RegQueryValueW
RegCreateKeyExW
RegDeleteValueA
RegQueryValueA
RegOpenKeyExW
RegSetValueW
RegQueryValueExA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 16.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ