Static task
static1
Behavioral task
behavioral1
Sample
c83d8dd7bb55d7c0570d6f07b7e244d0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c83d8dd7bb55d7c0570d6f07b7e244d0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c83d8dd7bb55d7c0570d6f07b7e244d0_JaffaCakes118
-
Size
211KB
-
MD5
c83d8dd7bb55d7c0570d6f07b7e244d0
-
SHA1
2052529b0b71955b184d44ebf17b543b19d26ea2
-
SHA256
2f71d428a68382af1b4dd8be2c3394a420d67fe24d288fa19c892f2dc1d6042c
-
SHA512
288d618772995cbe440b42afe3a57051c6d94e52448c176f3bf9ae94a63138658ab703c214abd07f8be4e15388c36035428e93c8e69cbf8ad1d51044d63a1918
-
SSDEEP
3072:zQYVdpT0tY2JjgG6AsxY6Wc7Np5lVy1TWJeyx7YM4jUo1wk/fd1HG+TA/nToDABT:zjzT4xkZrDNcTWEVMEUobV1xA/cDABWQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c83d8dd7bb55d7c0570d6f07b7e244d0_JaffaCakes118
Files
-
c83d8dd7bb55d7c0570d6f07b7e244d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
8cfaab6784ffe826fc74401e28cca74a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CallWindowProcA
DeleteMenu
DispatchMessageA
DrawIconEx
FindWindowA
GetCursorPos
GetDC
GetForegroundWindow
GetLastActivePopup
GetMenuItemID
GetScrollPos
GetSystemMetrics
GetWindowTextA
IntersectRect
IsIconic
IsZoomed
PostMessageA
RedrawWindow
RegisterClipboardFormatA
SetMenu
ShowOwnedPopups
ShowWindow
TrackPopupMenu
UnhookWindowsHookEx
UpdateWindow
WaitMessage
gdi32
AbortDoc
CreateICW
CreatePatternBrush
CreateRectRgnIndirect
DeleteObject
Ellipse
EnumFontsA
ExtEscape
GetCurrentPositionEx
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetNearestPaletteIndex
GetOutlineTextMetricsA
GetRegionData
GetTextExtentPoint32A
GetTextExtentPointA
GetTextExtentPointW
GetTextMetricsA
OffsetRgn
PlayMetaFile
RectInRegion
RestoreDC
SaveDC
ScaleViewportExtEx
SetDIBitsToDevice
SetTextAlign
UnrealizeObject
kernel32
CompareFileTime
CreateEventA
CreateFileMappingA
ExpandEnvironmentStringsA
FileTimeToDosDateTime
FindClose
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetConsoleMode
GetFileAttributesW
GetFileSize
GetFullPathNameA
GetLocaleInfoA
GetShortPathNameA
GetStringTypeA
GetUserDefaultLCID
GlobalAddAtomA
GlobalFree
LCMapStringW
SetEndOfFile
SizeofResource
WriteConsoleA
WritePrivateProfileStringA
lstrcmpA
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
KasZHWBq Size: 2KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE