Static task
static1
Behavioral task
behavioral1
Sample
c0e4d6b744f7ced63ab9a0f437e9e75b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0e4d6b744f7ced63ab9a0f437e9e75b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0e4d6b744f7ced63ab9a0f437e9e75b_JaffaCakes118
-
Size
80KB
-
MD5
c0e4d6b744f7ced63ab9a0f437e9e75b
-
SHA1
7a7abad28974cdb8d90778a0e9bdf89121714f87
-
SHA256
963e15cdc689ce410dc66659689ad76f76ad0fff7e36a513250fc74226633a73
-
SHA512
93cf5087b72b518a70d4f07fdc27c6fe91c2bcbc035ab5532d3fde725cfe7e546b29c3fb22669741b565828f79689f26d55a10bd45b44c36ad424d07f6253352
-
SSDEEP
1536:iFbYefNpTA3KLweZJRzdwRynzVJUU5bU0YOHRlov5CEgVKTeVxt/Po87Vpw1:iJYefY3kRXzOOTTzbVxlQ8I1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0e4d6b744f7ced63ab9a0f437e9e75b_JaffaCakes118
Files
-
c0e4d6b744f7ced63ab9a0f437e9e75b_JaffaCakes118.exe windows:4 windows x86 arch:x86
1fb551c3da27c2ef4bc88fa63ba9c51e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowLongA
SetFocus
SetDlgItemTextA
SetCursor
SendMessageA
SendDlgItemMessageA
PostMessageA
MessageBoxA
SetWindowTextA
LoadCursorA
IsDlgButtonChecked
GetDlgItemTextA
GetDlgItem
EndDialog
EnableWindow
DialogBoxParamA
CheckDlgButton
LoadIconA
CallWindowProcA
kernel32
lstrcpyA
lstrcatA
UnmapViewOfFile
SizeofResource
SetFilePointer
SetEndOfFile
MoveFileExA
MapViewOfFile
LockResource
LoadResource
GetModuleHandleA
GetFileSize
GetCommandLineA
CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
CreateThread
ExitProcess
ExitThread
FindResourceA
comctl32
InitCommonControls
comdlg32
GetOpenFileNameA
GetFileTitleA
shell32
DragQueryFileA
imagehlp
MapFileAndCheckSumA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE