Static task
static1
Behavioral task
behavioral1
Sample
efcf9ba0d495445e56b80787bfa2a35a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
efcf9ba0d495445e56b80787bfa2a35a_JaffaCakes118
-
Size
74KB
-
MD5
efcf9ba0d495445e56b80787bfa2a35a
-
SHA1
19f143d071ea2d0a7e955dee4af846c5ccf3f8fb
-
SHA256
78e03665ec4b4315215f34e3c23c3646b67d0106eaad182a95ad096a426e68c5
-
SHA512
974a6ef96a4860e3b34932dd6f0dbb6b11f4c1d8faead97f168d40e41a14d4b8683ec050fa904ec4e468555a1d556d3e935fa813335525eecd369dc804e951f2
-
SSDEEP
1536:+B5evZYlidRIKVmHCc7bn/L/DsvVMmFLIBcX:+7exYlijIMiCc7Tzm9wcX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efcf9ba0d495445e56b80787bfa2a35a_JaffaCakes118
Files
-
efcf9ba0d495445e56b80787bfa2a35a_JaffaCakes118.exe windows:4 windows x86 arch:x86
15988549936978d1da8c665ac066b0d0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawTextW
EndDialog
DrawIconEx
GetFocus
LoadCursorA
GetDC
DrawTextA
IsWindow
GetMenu
LoadMenuA
CopyImage
DialogBoxParamW
GetWindowTextLengthA
DrawIcon
CalcMenuBar
BlockInput
GetDlgItem
GetWindowTextA
CreateIcon
GetDlgItem
CloseWindow
BlockInput
AlignRects
GetCursor
DrawTextA
LoadCursorA
AppendMenuW
InsertMenuA
DrawIcon
CopyRect
EndDialog
AppendMenuA
IsWindow
DrawTextW
CopyIcon
DialogBoxParamA
GetWindowTextA
GetWindowTextLengthA
CreateIcon
kernel32
GetModuleHandleA
GetLocalTime
HeapAlloc
lstrcpyA
GetFileSize
ExitProcess
GetStringTypeW
GetOEMCP
FreeLibrary
WideCharToMultiByte
GetCommandLineW
GlobalAlloc
lstrcmpiA
GetCPInfo
GetFileType
lstrcmpA
GetOEMCP
HeapAlloc
GetOEMCP
GetModuleFileNameA
GetOEMCP
GetCPInfo
GetOEMCP
lstrcmpiA
GetOEMCP
lstrcpynA
GetOEMCP
GetStringTypeA
GetOEMCP
GlobalAlloc
GetOEMCP
GetFileType
GetOEMCP
Sections
.tddt Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdada Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ