Static task
static1
Behavioral task
behavioral1
Sample
d697102a4903da22bd8fe12d37bd03ac_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d697102a4903da22bd8fe12d37bd03ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d697102a4903da22bd8fe12d37bd03ac_JaffaCakes118
-
Size
112KB
-
MD5
d697102a4903da22bd8fe12d37bd03ac
-
SHA1
421c23975d900024b45143dd6ee38267ee6a4f6d
-
SHA256
6d2f64959bce668ef44331f350e871fd39c6364f27b6c3f90509e14b37c03b7a
-
SHA512
6070a76940bb463a50a587cd9209a9d43175e44f6019cfc44182a48b13b35fec9340875ca44e1b36f05ce813f19f8b797c7e7e7574b0f4d57b66dfb8ed0989c7
-
SSDEEP
3072:Ag6ZICNGL9xXYI4kurRq7TM2fxNJuRqc5MmpiuaCVmoz:AgJC8XfycMOxNJuRemp2Foz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d697102a4903da22bd8fe12d37bd03ac_JaffaCakes118
Files
-
d697102a4903da22bd8fe12d37bd03ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c9dd8ad3ccc43129ec1f6835cecdbd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableW
GetCurrentDirectoryA
GetFullPathNameA
FatalExit
ExpandEnvironmentStringsW
GetTimeFormatW
CreateWaitableTimerA
GetUserDefaultLCID
IsWow64Process
VirtualAllocEx
CancelWaitableTimer
user32
EnableWindow
EndPaint
CreateWindowExW
GetDlgItemTextW
PostMessageW
GetDC
GetClientRect
CreateMenu
BeginPaint
GetMenuItemCount
GetDlgItemTextA
wsprintfW
SendMessageA
DispatchMessageW
DefWindowProcA
SetWindowLongW
AppendMenuA
ReleaseDC
DispatchMessageA
LoadStringW
KillTimer
GetSystemMetrics
SetWindowTextA
wsprintfA
GetWindowRect
PostMessageA
PeekMessageA
TranslateMessageEx
SetForegroundWindow
CharPrevExA
SetCursor
IsWindow
SetWindowTextW
SendDlgItemMessageW
InvalidateRect
SetDlgItemInt
DialogBoxParamA
SetWindowLongA
GetSysColorBrush
SetDlgItemTextA
IsWindow
DefWindowProcW
GetWindowLongA
PostQuitMessage
gdi32
InvertRgn
CreatePenIndirect
CreateRectRgnIndirect
CreateCompatibleBitmap
UpdateColors
OffsetRgn
FrameRgn
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE