Static task
static1
Behavioral task
behavioral1
Sample
c07a9d36565dc06adb68f6113746d801_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c07a9d36565dc06adb68f6113746d801_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c07a9d36565dc06adb68f6113746d801_JaffaCakes118
-
Size
48KB
-
MD5
c07a9d36565dc06adb68f6113746d801
-
SHA1
c5815d5b8c4963aa05e1c63d5df777000998a7ab
-
SHA256
b35a6e5a21b4bf295d8faa039e60ae0f25383c13078bf04ccea4503d806ea592
-
SHA512
214e07c3c75e31fbb9c1d1feb6dc93e6f821f41bf68dbc14c960c19f32f5ae158024d36576224d9c2dfaafeb8a060c073c233e7794d148c497ab68c4ac875477
-
SSDEEP
768:vUs685mAlVrTDOqbDBFZbhZGwBwX3gxVR8dhwbY2lBd49PsS8ffQNMyG6Slu:MsHbrnvjZbrwX3KqeLj49PsS4OMyG6wu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c07a9d36565dc06adb68f6113746d801_JaffaCakes118
Files
-
c07a9d36565dc06adb68f6113746d801_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd8688e8befd16c3b46b0d0d52ec91ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetTopWindow
MessageBoxA
LoadIconA
ArrangeIconicWindows
CharUpperA
IsIconic
CharNextA
DestroyIcon
FlashWindow
GetSystemMetrics
RegisterWindowMessageA
LoadCursorA
SetCursorPos
CharLowerA
KillTimer
GetSysColorBrush
GetMessagePos
SetWindowTextA
GetMenuItemCount
GetParent
kernel32
lstrlenA
GlobalDeleteAtom
lstrcatA
SetLastError
LoadLibraryA
GetLastError
GetProcAddress
FreeLibrary
GlobalFindAtomA
GlobalAddAtomA
Sleep
GetConsoleCP
GetCommandLineA
FindResourceA
OutputDebugStringA
CopyFileA
AllocConsole
FreeConsole
shell32
ShellAboutA
gdi32
SelectObject
CreateCompatibleDC
SetTextColor
GetObjectA
GdiGetBatchLimit
GdiFlush
DeleteDC
DeleteObject
SetBkColor
EndPage
ole32
CoFreeUnusedLibraries
comctl32
InitCommonControls
FlatSB_ShowScrollBar
MakeDragList
FlatSB_GetScrollPos
DrawInsert
FlatSB_GetScrollRange
FlatSB_GetScrollProp
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ