Static task
static1
Behavioral task
behavioral1
Sample
e18b1144e578d7073677f856b81ded02_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e18b1144e578d7073677f856b81ded02_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e18b1144e578d7073677f856b81ded02_JaffaCakes118
-
Size
23KB
-
MD5
e18b1144e578d7073677f856b81ded02
-
SHA1
7b7fdcd637b5499cdbf9f5e3c1acf69542bb0fd2
-
SHA256
91dd7b1026ba92292b5d8e97b11af2e7b8889de8aa99ab56702a4210612d4c53
-
SHA512
b3f6d319df5dccc8d5522425b3bcb80a19031faad78b05b0c4724f7100d72219ec0a7028f628acb7272f4e25fec761867324733c7b159114c1081746fe99feba
-
SSDEEP
384:iQFlqwjXTSBeo+9txkv+o8LApJgLa0Mp8RWbPAw:ikP3xahgLa19
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e18b1144e578d7073677f856b81ded02_JaffaCakes118
Files
-
e18b1144e578d7073677f856b81ded02_JaffaCakes118.exe windows:4 windows x86 arch:x86
c744990019b2b76cfbb51341bb2f7308
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
BitBlt
CreateCompatibleDC
CreateFontA
CreateSolidBrush
DeleteDC
SelectObject
SetBkColor
SetBkMode
SetTextColor
kernel32
GlobalAlloc
GlobalFree
ExitProcess
user32
CallWindowProcA
DialogBoxParamA
EndDialog
FillRect
GetClientRect
GetDC
GetDlgItem
GetDlgItemTextA
LoadBitmapA
PostMessageA
ReleaseCapture
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetCapture
SetDlgItemTextA
SetWindowLongA
SetWindowTextA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ