Static task
static1
Behavioral task
behavioral1
Sample
b899048c1ca719e7825cef127d0b0a5b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b899048c1ca719e7825cef127d0b0a5b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b899048c1ca719e7825cef127d0b0a5b_JaffaCakes118
-
Size
27KB
-
MD5
b899048c1ca719e7825cef127d0b0a5b
-
SHA1
d5284739516322685e9cc5d2664f70ac35b5405e
-
SHA256
2a362cc0daa4c66ada8928778d449bb5e3f46fd4ea911d7ed9917cf61b1d7772
-
SHA512
69012b5119388689a218751efaef0004c81e2afa0282de44dc6b8dd4eb6d9674728de5c734571d2fffe54d0991623638fd9c9f690e00fb4868499d9058ffa608
-
SSDEEP
384:l9Lx3GpHRTLSF3EyZAOt9252lCnM/lGakpe9NXDUDM1qjW7PykJPF:z89SF39RtE52kelBfPXQMHqkJPF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b899048c1ca719e7825cef127d0b0a5b_JaffaCakes118
Files
-
b899048c1ca719e7825cef127d0b0a5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
525a7adc97148f69e263cbcfc81e9c62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextA
CreateIcon
GetDlgItem
GetMenu
GetDC
CloseWindow
DrawIconEx
DialogBoxParamA
CopyImage
CopyIcon
CopyRect
GetCursor
DrawIcon
InsertMenuA
LoadCursorA
DialogBoxParamW
LoadMenuA
DrawTextW
GetWindowTextLengthA
GetFocus
EndDialog
IsMenu
IsWindow
kernel32
GetStartupInfoA
GetCPInfo
GetStringTypeW
SetFilePointer
MultiByteToWideChar
WriteFile
GetVersion
LCMapStringW
lstrcpynA
GetStdHandle
TerminateProcess
GetCommandLineA
GetACP
GetModuleFileNameA
GetFileType
CreateFileA
GetStringTypeA
SetHandleCount
lstrcatA
GetOEMCP
lstrcpynW
GetCurrentProcess
lstrcpyA
LCMapStringA
comctl32
MenuHelp
CreateStatusWindowW
ImageList_GetIconSize
ImageList_Create
ImageList_GetIcon
CreateToolbar
ImageList_DragEnter
ImageList_AddIcon
CreateToolbarEx
ImageList_Add
CreateStatusWindow
ImageList_LoadImageW
CreateUpDownControl
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ