Static task
static1
Behavioral task
behavioral1
Sample
c1ab57269ef792de85bfecbe345fd2a8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c1ab57269ef792de85bfecbe345fd2a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1ab57269ef792de85bfecbe345fd2a8_JaffaCakes118
-
Size
14KB
-
MD5
c1ab57269ef792de85bfecbe345fd2a8
-
SHA1
aa815b7dd187c8d56471e76d7308f3dd89c60df9
-
SHA256
05ec703d6f5e66af7c28f80b0a9b7370ecf37a3d077064ca90818ff55877fb1c
-
SHA512
14998411d89c4b071cf1bc46466c7c3dd4cb364a8a2924a638036ba8a0164fbc58fbd379993013b127f7d4ee90399704b6e41a28c2fa142336cf7150fd070f1d
-
SSDEEP
192:QHle3a0s7YscYOVx/9r2slk+1rHbsL5dIXOyE+ZUN0P3OB0tdjy/mHN:VYOVx/9r3bXsVdILONM3OB0tdqm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1ab57269ef792de85bfecbe345fd2a8_JaffaCakes118
Files
-
c1ab57269ef792de85bfecbe345fd2a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
92aafccbdca686f17ed31964413869e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CheckRadioButton
GetWindowTextA
GetParent
SetWindowLongA
GetClientRect
UpdateWindow
EnableWindow
GetDlgItem
PostMessageA
GetWindowLongA
CreateWindowExA
LoadCursorA
SetCursor
SendMessageA
MessageBoxA
SetPropA
RemovePropA
GetPropA
kernel32
GetModuleHandleA
GetStartupInfoA
GetProcAddress
LoadLibraryA
msvcr71
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_strupr
fprintf
_iob
malloc
free
sprintf
sscanf
memset
wcscpy
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
comctl32
PropertySheetA
CreatePropertySheetPageA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE