tr9nNrHKF@8
Static task
static1
Behavioral task
behavioral1
Sample
d0eb1078f4b84152a1ca9883faa47795_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d0eb1078f4b84152a1ca9883faa47795_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0eb1078f4b84152a1ca9883faa47795_JaffaCakes118
-
Size
123KB
-
MD5
d0eb1078f4b84152a1ca9883faa47795
-
SHA1
9792c680b9c47534366972c2cc4a0fa961b85661
-
SHA256
baeaf36b2981c8afd1ba6ef26917b06ee622e3441bbd1a9818e2c8b531c02028
-
SHA512
de03b20d2f3525165212a3d7f674a977031947cd432959e0a0685e4d060ae258f551129cfd649f4bc785c43ddd065ebd4aeb6499f73adde645e722c6e4b6f5b1
-
SSDEEP
3072:hKwmzoWIcwmNr2063xd9xBPR9RH86AWzAyNZj6:hKH9fwPxy6AWsyvm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0eb1078f4b84152a1ca9883faa47795_JaffaCakes118
Files
-
d0eb1078f4b84152a1ca9883faa47795_JaffaCakes118.exe windows:4 windows x86 arch:x86
601d3134da3ba95bdb01edc1cfbda940
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memmove
exit
wcstol
memset
_acmdln
mbstowcs
gdi32
GetClipBox
GetCurrentPositionEx
SetBkMode
CreateDIBSection
oleaut32
SysStringLen
OleLoadPicture
VariantChangeType
RegisterTypeLib
GetErrorInfo
SafeArrayPtrOfIndex
version
GetFileVersionInfoA
VerInstallFileA
VerQueryValueA
comctl32
ImageList_Write
ImageList_DragShowNolock
ImageList_Remove
ImageList_Read
ImageList_Draw
ImageList_Destroy
ImageList_Add
ImageList_GetBkColor
ImageList_Create
ImageList_DrawEx
user32
GetActiveWindow
EndDialog
GetWindowLongA
MapWindowPoints
BeginPaint
GetDC
RegisterClassA
GetSysColorBrush
IsWindowVisible
MessageBoxA
SetClipboardData
GetWindowRect
GetWindowLongW
GetWindow
TranslateMessage
UpdateWindow
GetKeyboardType
ShowWindow
GetCapture
EndPaint
IsCharUpperA
GetPropA
CloseClipboard
GetSystemMetrics
IsWindowUnicode
CreateWindowExA
RegisterWindowMessageA
SetScrollInfo
GetWindowDC
SetFocus
GetMenu
FillRect
IsZoomed
WaitMessage
SetWindowPlacement
UnhookWindowsHookEx
TrackPopupMenu
GetFocus
GetMenuState
KillTimer
DrawMenuBar
EmptyClipboard
GetClassNameA
RemoveMenu
InflateRect
EnumWindows
IsWindow
SetWindowLongW
GetScrollInfo
GetDCEx
SetParent
GetScrollPos
SetMenu
IsMenu
GetMenuItemCount
InvalidateRect
IsWindowEnabled
GetClipboardData
DispatchMessageA
GetClientRect
LoadIconA
LoadStringA
DrawTextA
GetKeyboardLayout
GetParent
TranslateMDISysAccel
ScrollWindow
EnumThreadWindows
DrawEdge
DestroyWindow
LoadCursorA
CharLowerBuffA
IntersectRect
EnumChildWindows
GetWindowTextLengthA
SetWindowPos
SetWindowsHookExA
SetRect
SetActiveWindow
ReleaseDC
AdjustWindowRectEx
DrawIconEx
PostQuitMessage
SetScrollPos
IsRectEmpty
CheckMenuItem
InsertMenuItemA
SendMessageW
OpenClipboard
GetKeyNameTextA
GetWindowThreadProcessId
ole32
ReleaseStgMedium
CoGetMalloc
shell32
Shell_NotifyIconW
kernel32
GetModuleHandleA
VirtualAllocEx
ExitProcess
GetThreadLocale
VirtualAlloc
GetCurrentThreadId
VirtualQuery
VirtualFree
LoadLibraryA
GetCommandLineA
SizeofResource
comdlg32
FindTextA
GetFileTitleA
ChooseColorA
GetOpenFileNameA
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
.data
-
.rdata
-
.rsrc/0/DIALOG/TEXTFILEDLG
-
.rsrc/0/MANIFEST/1.xml
-
.rsrc/0/RCDATA/DVCLAL
-
.rsrc/0/STRING/4094
-
.rsrc/0/STRING/4095
-
.rsrc/1033/BITMAP/BBABORT.bmp
-
.rsrc/1033/version.txt
-
.text