Static task
static1
Behavioral task
behavioral1
Sample
efd5fef63a375d35d7171977008725a5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efd5fef63a375d35d7171977008725a5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efd5fef63a375d35d7171977008725a5_JaffaCakes118
-
Size
65KB
-
MD5
efd5fef63a375d35d7171977008725a5
-
SHA1
7f63664be2bb90fdbc2eec3f950ac7d5ab7563be
-
SHA256
8f92c13931b541fdf28cda8abb9615d03f3e51f007a04bd5f4a1fc629bb861f9
-
SHA512
fb1a3f36e81c65fe303d01d8c9f9f7cffc7765ae11c522af0eaf0badfdc6b809b86cd892d88182dd469bc45f66463bbde88ccbfcf06617f17099ea04ea4dda5d
-
SSDEEP
1536:xUy2Qbrv21ndCvqYZvfaUYmVsTeuzOpwt1K6dMHqW:xd6dCyYZvCUlVAeKOUo6J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efd5fef63a375d35d7171977008725a5_JaffaCakes118
Files
-
efd5fef63a375d35d7171977008725a5_JaffaCakes118.exe windows:5 windows x86 arch:x86
d822ec60d9f59eb7c5de4e89adce7d7a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetLastError
LoadLibraryA
user32
CheckRadioButton
CreateWindowExW
DefWindowProcW
DialogBoxParamW
DrawFocusRect
EnableMenuItem
EndDialog
FrameRect
GetDC
GetDlgItem
GetDlgItemTextW
CharUpperBuffW
GetWindowLongW
IsCharAlphaW
IsDlgButtonChecked
LoadCursorW
LoadStringW
MessageBoxW
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
SetWindowLongW
TranslateAcceleratorW
UnhookWindowsHookEx
CallWindowProcW
GetKeyState
advapi32
RegOpenKeyA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52361 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52362 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52363 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52364 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52365 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52366 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52367 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data67 Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ