Static task
static1
Behavioral task
behavioral1
Sample
dda3566f66c1683811431bae17070608_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dda3566f66c1683811431bae17070608_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dda3566f66c1683811431bae17070608_JaffaCakes118
-
Size
28KB
-
MD5
dda3566f66c1683811431bae17070608
-
SHA1
2ba4b910d6cc5e24c13e1bebd9d1aa45a62ef292
-
SHA256
43a5f373bb94206d3a2e2038c52c708a98e7d2259341085fd13b0160f2d05e92
-
SHA512
a729ea7e46ef7c9cc5e1ffe61f5fbd5c0adaa8f5736eaa54d3f5b298ee3f31d85bbfaab2858e04f3aa4906fd6a6a096de6e88cd29bd66d39e8bc391c8348815b
-
SSDEEP
192:T250RapL7/NAnhlBIw0a/MyMVne1bdSWYfOB5P4IPSDtNUoyn3a1VrhmEABEyep0:a5HpLLJwx/U85bSDtaQ3MEAz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dda3566f66c1683811431bae17070608_JaffaCakes118
Files
-
dda3566f66c1683811431bae17070608_JaffaCakes118.exe windows:4 windows x86 arch:x86
88e5b774609101179596440519adf345
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CreateDirectoryA
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetStartupInfoA
user32
LoadImageA
IsRectEmpty
KillTimer
GetDesktopWindow
EndDialog
IsWindowEnabled
GetWindowTextA
MessageBoxA
ShowWindow
SetTimer
SetWindowTextA
SendDlgItemMessageA
EnableWindow
SendMessageA
GetDlgItem
SetFocus
InvalidateRect
PostMessageA
DefDlgProcA
LoadCursorA
GetSysColor
RegisterClassA
GetWindowLongA
SetWindowLongA
DialogBoxParamA
gdi32
PatBlt
SelectObject
CreateSolidBrush
CreateCompatibleDC
StretchBlt
DeleteObject
GetDIBits
GetClipBox
CreateDCA
DeleteDC
SetBkColor
SetBkMode
GetStockObject
shell32
ShellExecuteA
SHFileOperationA
ws2_32
WSAStartup
socket
inet_addr
gethostbyname
htons
connect
setsockopt
send
recv
shutdown
closesocket
WSACleanup
comctl32
InitCommonControlsEx
msvcrt
_controlfp
_acmdln
_XcptFilter
_exit
exit
strrchr
fopen
fgets
fclose
sprintf
tolower
strncmp
??2@YAPAXI@Z
strncpy
strchr
atoi
??3@YAXPAX@Z
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__getmainargs
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ