Static task
static1
Behavioral task
behavioral1
Sample
baa9539b5cbd42d9b92f381cdc3a60fb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
baa9539b5cbd42d9b92f381cdc3a60fb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
baa9539b5cbd42d9b92f381cdc3a60fb_JaffaCakes118
-
Size
48KB
-
MD5
baa9539b5cbd42d9b92f381cdc3a60fb
-
SHA1
551570e1963efad2781f79c6db4769ad8ee5a317
-
SHA256
122bd8a0ea9a27fedeee2e39c513745202eb56f356b8857ee82d457ab7223c26
-
SHA512
f0f46699d2bc2fcc7728765f03a74dd235dcf4458a2b318a4519a57b734dadf67ec2ffb417b96e093e460240c3618319eb3f8d2a1bc851e72845a2900e192851
-
SSDEEP
768:OXoO8rxnJR4gBmhI7yTgOSPi9BHG8/wkhTaSrCm+Dv/PXW:OXoTzD8/wkhTKmAXW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baa9539b5cbd42d9b92f381cdc3a60fb_JaffaCakes118
Files
-
baa9539b5cbd42d9b92f381cdc3a60fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
99f31f8524103d0e9f8b73e2994837d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
GetMenuItemCount
GetWindowTextW
ShowWindowAsync
EnableWindow
GetCursorPos
GetClientRect
LoadStringA
GetDlgItemInt
GetWindowTextA
GetDlgItemTextA
GetSystemMetrics
GetWindowDC
IsWindowUnicode
ShowWindow
MessageBoxA
GetWindowRect
IsWindowVisible
IsWindowEnabled
GetSysColorBrush
GetWindowLongA
GetDCEx
GetWindowPlacement
GetWindowLongW
DestroyWindow
GetWindowThreadProcessId
GetDlgItemTextW
kernel32
HeapFree
InitializeCriticalSection
InterlockedIncrement
UnhandledExceptionFilter
GetModuleFileNameA
IsBadCodePtr
InterlockedExchange
Sleep
TerminateProcess
IsBadReadPtr
SetLastError
HeapAlloc
GetStartupInfoW
GetModuleHandleW
GetProcAddress
GetCurrentThread
GetLastError
setupapi
SetupAdjustDiskSpaceListA
msvcrt
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
_onexit
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ