Static task
static1
Behavioral task
behavioral1
Sample
ceaae2176f72a7726d74d2439e91a2ac_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ceaae2176f72a7726d74d2439e91a2ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ceaae2176f72a7726d74d2439e91a2ac_JaffaCakes118
-
Size
28KB
-
MD5
ceaae2176f72a7726d74d2439e91a2ac
-
SHA1
ab83a8cd270515b080028b6c62e4cc02434c6276
-
SHA256
a19e9ee1d12c67ddadf12901f741e1e885d65319ffb5dcb00d1fb4c0fc11014a
-
SHA512
68c47b72757ad9a93b47d5dbdaa678f420a5c4c1bf3abade0f8078baec933da6923d3da18e5eb18ff6694cc584bc5e161802178698fe3ac8c914ffd384669595
-
SSDEEP
384:qwNw10ZVhcgwml4pindXFyyDFA8qjXrh6oZv:vTnFywOj7h6o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ceaae2176f72a7726d74d2439e91a2ac_JaffaCakes118
Files
-
ceaae2176f72a7726d74d2439e91a2ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
c5e4176f4c36c9d71667002ae109528f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
EndDialog
PostQuitMessage
GetWindowRect
GetSystemMetrics
SetWindowPos
IsWindow
FindWindowExA
KillTimer
MessageBoxA
SetTimer
1sass
?SetQQHook@@YGHPAUHWND__@@@Z
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStringTypeW
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
LoadLibraryA
GetEnvironmentStrings
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ