__MessageBoxW@12
Static task
static1
Behavioral task
behavioral1
Sample
f0c9b207f212fceea7c5f3eae9212525_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0c9b207f212fceea7c5f3eae9212525_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0c9b207f212fceea7c5f3eae9212525_JaffaCakes118
-
Size
47KB
-
MD5
f0c9b207f212fceea7c5f3eae9212525
-
SHA1
b000e129810e5f1634db0ad9dc32b6da9c8f5930
-
SHA256
48e7937c2bf8bb59d6ee9edb36b1657745def1036a409c2deace2ca70c5e10a9
-
SHA512
8e5fb4fb3f51960e2270643af78946e87e2dbf7d906bf15ac2ed11c6ccc8e6c07cce2370b1718800cd8afb768cc5ad0ce2584808870e53128bd8703c9ee43c77
-
SSDEEP
768:gEWenv+QhB0ss0WJoh9rOqxWwBwGEE15lq6FpE2q/9vvsLotiHCiLOj:qU+QhBjs0Qof6qw1hejH3OU6iiiCj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0c9b207f212fceea7c5f3eae9212525_JaffaCakes118
Files
-
f0c9b207f212fceea7c5f3eae9212525_JaffaCakes118.exe windows:5 windows x86 arch:x86
69d50be2c73b00c557ce3a0df27c9ebc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrIsIntlEqualW
PathAppendW
PathCommonPrefixW
ord155
ChrCmpIA
shell32
ord147
kernel32
FileTimeToDosDateTime
GetFileSize
FreeLibrary
SetWaitableTimer
SetCommState
VerifyVersionInfoW
GetFileAttributesExW
LoadModule
BeginUpdateResourceA
PurgeComm
GetFileTime
CreateSemaphoreW
LoadLibraryExW
ClearCommError
lstrcpyW
OpenSemaphoreW
GetNamedPipeInfo
CreateEventA
LoadLibraryW
lstrcmpiA
user32
GetDC
MessageBoxIndirectA
LoadIconA
ChangeMenuA
LoadMenuIndirectA
HideCaret
GetSystemMenu
EnumDisplayDevicesW
SendNotifyMessageW
UnloadKeyboardLayout
DrawFocusRect
GetForegroundWindow
GetKeyboardLayout
EnumPropsA
SendMessageTimeoutW
DefMDIChildProcW
SetWindowsHookW
DrawMenuBar
SetCaretBlinkTime
ScrollWindowEx
MapWindowPoints
AdjustWindowRect
GetDlgCtrlID
SetDlgItemTextA
DefWindowProcW
GetWindow
EnableScrollBar
gdi32
LPtoDP
GetEnhMetaFileDescriptionW
SetSystemPaletteUse
GetCharABCWidthsFloatA
GetKerningPairsW
SaveDC
CopyMetaFileW
GetFontLanguageInfo
GetMetaFileW
CreateDIBPatternBrushPt
FillPath
GetRegionData
UpdateColors
advapi32
AddAccessAllowedObjectAce
AddAce
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ex_dat Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.i_text Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mem_0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mconst Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat_s Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 890B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ