Static task
static1
Behavioral task
behavioral1
Sample
d0433031a442baf31ae678562772f176_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0433031a442baf31ae678562772f176_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0433031a442baf31ae678562772f176_JaffaCakes118
-
Size
213KB
-
MD5
d0433031a442baf31ae678562772f176
-
SHA1
01d28c8351e5c85be55c2902290c2ad9d3bec778
-
SHA256
33217fe0d97a3de25d2fb97352e31aba85b92cf505d7309c6b21971be47bef51
-
SHA512
9824bd9d6bc360418608346a7a3158cc1ef9243c62e0932aa2529d9d3811a448c2e44a08281c05aeb5e11f446610decad6e7d9c233d6d8dfc1e3975c5b8e02ed
-
SSDEEP
3072:WGf6viAIxc9LNyRulW1fyNi2i9snSSK0qt94kJ+7fno7DFkMO3jF9G:WGuCxciuW1Ksvp0q907Q7DF43jF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0433031a442baf31ae678562772f176_JaffaCakes118
Files
-
d0433031a442baf31ae678562772f176_JaffaCakes118.exe windows:4 windows x86 arch:x86
56cbe08ea3f3af00b0a5a91fd2253f68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
comdlg32
GetOpenFileNameA
FindTextA
ChooseColorA
kernel32
GetCommandLineA
GetModuleHandleA
ExitThread
GetACP
IsBadHugeReadPtr
LoadLibraryA
GetLastError
GetProcAddress
VirtualAlloc
LoadLibraryExA
ExitProcess
lstrlenA
LocalAlloc
shell32
DragQueryFileA
Shell_NotifyIconA
SHGetFileInfoA
user32
UnregisterClassA
EqualRect
EnumThreadWindows
BeginPaint
IsChild
GetSubMenu
UpdateWindow
DrawAnimatedRects
SetClassLongA
ChildWindowFromPoint
CloseClipboard
GetFocus
GetActiveWindow
TranslateMDISysAccel
EnableScrollBar
SetWindowPos
GetKeyboardLayout
GetWindowDC
SetCapture
GetKeyState
ScreenToClient
GetWindowPlacement
CreateMenu
MsgWaitForMultipleObjects
GetSysColorBrush
CreateIcon
GetMenuState
SetScrollRange
GetMenuItemCount
CreatePopupMenu
DefMDIChildProcA
IsIconic
IsDialogMessageA
EnumWindows
DestroyIcon
LoadIconA
ClientToScreen
EmptyClipboard
GetCursorPos
GetMenuStringA
PeekMessageW
GetWindowTextA
SetActiveWindow
DrawEdge
TrackPopupMenu
PtInRect
ShowWindow
GetClassInfoA
GetKeyboardLayoutList
CharLowerBuffA
GetKeyboardState
GetWindowLongA
SetTimer
GetKeyboardType
IsWindow
DestroyCursor
MapVirtualKeyA
LoadStringA
GetParent
IsRectEmpty
IntersectRect
SetWindowPlacement
FindWindowA
IsZoomed
SetMenuItemInfoA
PostQuitMessage
SendMessageW
DefWindowProcA
DeleteMenu
GetIconInfo
DrawIconEx
EndPaint
GetCapture
FrameRect
SetClipboardData
GetDC
DrawTextA
ActivateKeyboardLayout
GetClientRect
GetWindowRect
InsertMenuItemA
GetWindowLongW
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES9 Size: 512B - Virtual size: 55B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES3 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 1024B - Virtual size: 637B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES7 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES5 Size: 512B - Virtual size: 329B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ