Static task
static1
Behavioral task
behavioral1
Sample
d6dfd86635ab3eb0dcd05fa8bf89a78f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6dfd86635ab3eb0dcd05fa8bf89a78f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6dfd86635ab3eb0dcd05fa8bf89a78f_JaffaCakes118
-
Size
233KB
-
MD5
d6dfd86635ab3eb0dcd05fa8bf89a78f
-
SHA1
8e8bcb018c360607113560af6ed0a1f3848de4cc
-
SHA256
aaa1800bd3ceb6552a574d814781ea0ff07c20fe669b937a481a54d776f6a381
-
SHA512
a8b54194098aabc51079f8191807442df2006a5c9744258b17bbfdb22ec258c213a47dadd62bda7cd896f95d8c3051ea63768039b9c82d0be06c69649a231b8f
-
SSDEEP
6144:+GihJ8uOiEE5to0yEnnAoaXUi67JBIPdD7Nf:If8uOTE5hyEnnAFDGSP5Rf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6dfd86635ab3eb0dcd05fa8bf89a78f_JaffaCakes118
Files
-
d6dfd86635ab3eb0dcd05fa8bf89a78f_JaffaCakes118.exe windows:4 windows x86 arch:x86
abbbefa7fe2e82adbf56830997c870b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
lstrlenA
LoadLibraryExA
LoadLibraryA
GetModuleHandleA
VirtualAllocEx
LocalAlloc
advapi32
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
user32
ShowWindow
ShowScrollBar
wsprintfA
CallNextHookEx
SetCursor
ScreenToClient
LoadKeyboardLayoutA
SetWindowLongA
ChildWindowFromPoint
TrackPopupMenu
GetTopWindow
IsWindow
IntersectRect
SetTimer
SetWindowsHookExA
SetParent
SetCapture
EnumChildWindows
GetDesktopWindow
GetActiveWindow
GetKeyNameTextA
EndPaint
GetMenuItemCount
IsWindowUnicode
SetClassLongA
DispatchMessageA
GetClipboardData
SetFocus
DefWindowProcA
SetRect
IsChild
GetClassNameA
AdjustWindowRectEx
SetActiveWindow
GetCursorPos
GetPropA
GetWindowRect
DrawFrameControl
DestroyCursor
CharLowerA
PostMessageA
GetParent
SetScrollInfo
MessageBoxA
FindWindowA
CharNextA
MsgWaitForMultipleObjects
GetScrollPos
DestroyIcon
DrawIcon
WaitMessage
CheckMenuItem
OffsetRect
CreateWindowExA
CallWindowProcA
IsRectEmpty
SetWindowTextA
ActivateKeyboardLayout
LoadIconA
WindowFromPoint
SetScrollPos
BeginPaint
CreatePopupMenu
IsDialogMessageW
EqualRect
GetWindowThreadProcessId
IsWindowVisible
SetPropA
CharLowerBuffA
LoadCursorA
GetMenuItemID
RedrawWindow
MoveWindow
OemToCharA
SendMessageW
SetWindowPlacement
GetDlgItem
TranslateMessage
DestroyMenu
RegisterWindowMessageA
GetLastActivePopup
GetCursor
IsZoomed
GetScrollRange
GetWindowDC
DrawEdge
GetWindowLongW
CreateIcon
FillRect
ReleaseDC
InvalidateRect
DispatchMessageW
DrawMenuBar
EnableWindow
ClientToScreen
GetWindow
CharUpperBuffA
RemoveMenu
CharToOemA
SetWindowLongW
EnableScrollBar
GetKeyboardLayoutList
EnumThreadWindows
GetMenuState
GetWindowLongA
OpenClipboard
GetKeyboardState
GetCapture
CloseClipboard
EmptyClipboard
MapVirtualKeyA
RemovePropA
GetSystemMetrics
InflateRect
GetSysColorBrush
SystemParametersInfoA
GetClientRect
GetScrollInfo
CharNextW
GetMessagePos
DrawIconEx
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 512B - Virtual size: 353B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ