Static task
static1
Behavioral task
behavioral1
Sample
d69eca628b63672ace3573758aedd028_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d69eca628b63672ace3573758aedd028_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d69eca628b63672ace3573758aedd028_JaffaCakes118
-
Size
27KB
-
MD5
d69eca628b63672ace3573758aedd028
-
SHA1
b3739ef4c7c23d11c567939355b3ea908b36aa15
-
SHA256
5833d5d87941b0c810fe62a2388f5149577f3464e5889a8aa3d869c1be440baa
-
SHA512
8ce251295cb1a82f3e2b985453e797895270baaa2364e7a156675218d4d66aebf8b49cc39cc8bdb5f8ac4ef8dcc555a592250af81ba90c776b4dae0f5ec4c498
-
SSDEEP
768:sUXaknd7PSAjcAzBrLj+rKyqiHoODWUHlB2:LXld7PSAjcANirKyqaWUFB2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d69eca628b63672ace3573758aedd028_JaffaCakes118
Files
-
d69eca628b63672ace3573758aedd028_JaffaCakes118.exe windows:1 windows x86 arch:x86
58c1c9e147be181c622a398a34d72229
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryW
CreateFileW
CreateProcessW
ExitProcess
ExpandEnvironmentStringsW
GetExitCodeProcess
GetLastError
GetModuleHandleW
GetTempFileNameW
GetTempPathW
MultiByteToWideChar
WaitForSingleObject
WriteFile
lstrcatW
lstrcpyW
lstrlenW
wininet
InternetOpenW
InternetOpenUrlW
InternetReadFile
InternetCloseHandle
HttpQueryInfoW
user32
CheckDlgButton
DialogBoxIndirectParamW
DispatchMessageW
EnableWindow
EndDialog
EnumChildWindows
FindWindowExW
GetClientRect
GetDlgItem
GetDlgItemTextW
GetWindowLongW
GetWindowRect
IsDlgButtonChecked
MessageBoxW
PeekMessageW
PostMessageW
RegisterWindowMessageW
SendMessageW
SetDlgItemTextW
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
TranslateMessage
wsprintfA
wsprintfW
advapi32
RegCloseKey
RegCreateKeyW
RegOpenKeyExW
RegQueryValueW
RegQueryValueExA
RegQueryValueExW
RegSetValueW
RegSetValueExW
gdi32
CreateFontIndirectA
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
Sections
.c Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.b Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ