Static task
static1
Behavioral task
behavioral1
Sample
dbfa1e1ac16797dbffcd8305924dc9d2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbfa1e1ac16797dbffcd8305924dc9d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbfa1e1ac16797dbffcd8305924dc9d2_JaffaCakes118
-
Size
192KB
-
MD5
dbfa1e1ac16797dbffcd8305924dc9d2
-
SHA1
c6b6c22f1b493b62b8df5dd0115175bd736a69de
-
SHA256
9267794515674b0f97b6f54dbb695eebfad4f49210e39f13198b926e31e746e4
-
SHA512
20da2b3e5e6d4cb0711d0d98fdf6a87d707c82b83bc728edf6d73066cea73c309cb831e6c282c6b65e9bc7b52b24b30fd692d679c496ad4524715a7a986fa4a0
-
SSDEEP
3072:3bY2eaQlUqtqfes1aIszsC+Ld2FTWvUv44meHHvkNulLIHIRGST:3DnQdtqfescbz0UnxmeHMNVW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbfa1e1ac16797dbffcd8305924dc9d2_JaffaCakes118
Files
-
dbfa1e1ac16797dbffcd8305924dc9d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
d045b756a20e5459af213e1485a38e2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenuStringA
wsprintfA
CloseClipboard
GetParent
GetCursorPos
DrawTextA
CallNextHookEx
ShowScrollBar
EmptyClipboard
DispatchMessageW
CreateIcon
LoadBitmapA
PostMessageA
IsWindow
CharNextA
RedrawWindow
EndPaint
GetForegroundWindow
GetIconInfo
InsertMenuItemA
SetWindowPlacement
GetKeyboardType
SetClassLongA
KillTimer
FindWindowA
ole32
CoReleaseMarshalData
CoRevokeClassObject
CoUnmarshalInterface
CoGetMalloc
StgCreateDocfileOnILockBytes
CoCreateFreeThreadedMarshaler
OleCreateStaticFromData
CoCreateGuid
StgOpenStorage
kernel32
LoadLibraryExA
IsBadReadPtr
GetACP
GetLastError
ExitThread
VirtualAllocEx
ExitProcess
GetCommandLineA
lstrlenW
GetModuleHandleA
LoadLibraryA
GetCommandLineW
GetProcAddress
comctl32
ImageList_Add
ImageList_DrawEx
ImageList_Read
ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Destroy
version
GetFileVersionInfoA
VerFindFileA
comdlg32
ChooseColorA
GetSaveFileNameA
FindTextA
GetFileTitleA
GetOpenFileNameA
oleaut32
SysFreeString
VariantChangeType
SafeArrayPtrOfIndex
SysReAllocStringLen
RegisterTypeLib
SafeArrayCreate
SafeArrayGetUBound
SafeArrayUnaccessData
msvcrt
abs
wcschr
log
tolower
strcmp
malloc
strlen
advapi32
RegCreateKeyA
RegQueryValueExA
RegEnumKeyA
RegEnumKeyExA
Sections
CODE Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ