Static task
static1
Behavioral task
behavioral1
Sample
da03c8eb57f00fdf1990908c9288fb7d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da03c8eb57f00fdf1990908c9288fb7d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
da03c8eb57f00fdf1990908c9288fb7d_JaffaCakes118
-
Size
351KB
-
MD5
da03c8eb57f00fdf1990908c9288fb7d
-
SHA1
4699c36972e54b39dfdcddf4b8f2831fe110ecb8
-
SHA256
b64a1418fc066bd6cb2489b5ab9b60b5660c6e6cc19997e9304ddae8d0785f80
-
SHA512
c3f34df86b3b1506d582145309b381416854b82edaa2060821070cf333cfdd644ed390c46aff15676fea8cd49ec92d1cd39a2f6fc1deba58f24781d8b4924418
-
SSDEEP
6144:1C3lEFuM6EtvB9qSV41vMTAINUACvSXhD1em/MtisIX4pE2FXjrh:1C3lEkKpcywUTA3ADL/M0Z2v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da03c8eb57f00fdf1990908c9288fb7d_JaffaCakes118
Files
-
da03c8eb57f00fdf1990908c9288fb7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
b3fae215403097f5b2d698b436f07693
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
GetDeviceCaps
DeleteObject
GetObjectA
GetDIBits
SetDIBits
comctl32
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_SetBkColor
kernel32
FreeLibrary
ExpandEnvironmentStringsW
LoadResource
LoadLibraryA
CreateProcessW
SizeofResource
LoadLibraryExA
GetProcAddress
GlobalFree
MulDiv
LockResource
lstrlenA
CloseHandle
WaitForSingleObject
EnumResourceNamesA
CreateProcessA
SearchPathA
GetProcessHeap
ExpandEnvironmentStringsA
GlobalAlloc
ExitProcess
GetWindowsDirectoryW
LoadLibraryExW
FindResourceA
GetModuleHandleA
SearchPathW
lstrlenW
advapi32
QueryServiceStatusEx
ElfDeregisterEventSource
user32
SetDlgItemTextA
GetSubMenu
IsWindowVisible
SetWindowLongA
CreateIconFromResourceEx
GetMenuState
SetActiveWindow
LookupIconIdFromDirectoryEx
KillTimer
UpdateWindow
GetCursorPos
EnableMenuItem
SetWindowTextW
GetMenuStringA
SetDlgItemTextW
LoadImageA
GetSystemMetrics
GetWindowTextA
SetTimer
RegisterClassW
DestroyWindow
LoadCursorA
GetDlgItem
SendMessageA
LoadImageW
SetWindowPos
PostMessageA
CallWindowProcA
UnregisterClassA
ReleaseDC
CreateWindowExA
GetDC
CreateDialogParamA
GetSysColor
TrackPopupMenu
CreateWindowExW
SetWindowLongW
GetMenuStringW
GetKeyState
GetWindowLongW
UnregisterClassW
ScreenToClient
CreateDialogParamW
GetWindowTextW
MessageBoxW
GetWindowLongA
DestroyIcon
CallWindowProcW
RegisterClassA
DefWindowProcW
GetIconInfo
ClientToScreen
CreateIconIndirect
SetWindowTextA
DefWindowProcA
InvalidateRect
Sections
.text Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE