Static task
static1
Behavioral task
behavioral1
Sample
f3e052ef8a29cc1ddbd43e15aff53901_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
f3e052ef8a29cc1ddbd43e15aff53901_JaffaCakes118
-
Size
92KB
-
MD5
f3e052ef8a29cc1ddbd43e15aff53901
-
SHA1
06c63f9d2c1fe7d2eddf2beed933c0793422ebe8
-
SHA256
4f9e830a73656a545181df7e84b1f1636ac80da6606d44a736e7582028db683f
-
SHA512
9d085b7c4667b79417149e914574da6468ec853a508acc800ce175fe389ce007b28c9a876c4100923fb0bb8a60c1d4f0dab4980d4640e09d537c883035c07fb4
-
SSDEEP
1536:9CgWtgIQHWDDrCnW+Qdw4k8CucYi6dHv5f/23yMIKKKEl2qmdNYiJHkrpNg:4gWjQHEncsTkpuLi6R5fw3EgkiIXg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3e052ef8a29cc1ddbd43e15aff53901_JaffaCakes118
Files
-
f3e052ef8a29cc1ddbd43e15aff53901_JaffaCakes118.exe windows:5 windows x86 arch:x86
2069d52545052a9cfbc27b60384eb383
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CheckMenuRadioItem
DispatchMessageA
EnableMenuItem
LoadCursorA
LoadIconA
RegisterClassExA
GetWindowLongA
GetSystemMetrics
SetWindowTextA
BeginPaint
EndPaint
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
gdi32
CreateHatchBrush
LineTo
GetBkColor
CreateSolidBrush
DeleteObject
GetStockObject
ole32
ProgIDFromCLSID
OleGetAutoConvert
OleRegGetUserType
StringFromGUID2
CoInitialize
oleaut32
SafeArrayAllocDescriptor
SafeArrayDestroyDescriptor
CreateErrorInfo
kernel32
HeapDestroy
HeapFree
InterlockedIncrement
QueryPerformanceCounter
GetStartupInfoA
GetVersionExA
EnterCriticalSection
InitializeCriticalSection
HeapAlloc
HeapCreate
GetCommandLineA
GetACP
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
GetFileSize
GetLastError
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE