Static task
static1
Behavioral task
behavioral1
Sample
f51550bcbf81cf209461053e6bc96ef9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f51550bcbf81cf209461053e6bc96ef9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f51550bcbf81cf209461053e6bc96ef9_JaffaCakes118
-
Size
65KB
-
MD5
f51550bcbf81cf209461053e6bc96ef9
-
SHA1
0551170e53f4de3ec51d5201a73257a3e4b93172
-
SHA256
fbe315d79e81858fa312d0bf0e957e09517cc97ecd52da3b80fccfbadd3166ef
-
SHA512
abdad3fca4f302ddce32978b9829c99d131fe96d4c4ac118c6d6ed8e17efb1b7bf41646de52209ec56a350b3334049c56b6848b7dcb40c78ee79b09b57dd7dcd
-
SSDEEP
1536:7UAXGrrRGlndy/ao0vEaUFPVsTOp+zOulvE4ooqW:7K4dySo0v3UtVAOMOWS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f51550bcbf81cf209461053e6bc96ef9_JaffaCakes118
Files
-
f51550bcbf81cf209461053e6bc96ef9_JaffaCakes118.exe windows:5 windows x86 arch:x86
d822ec60d9f59eb7c5de4e89adce7d7a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetLastError
LoadLibraryA
user32
CheckRadioButton
CreateWindowExW
DefWindowProcW
DialogBoxParamW
DrawFocusRect
EnableMenuItem
EndDialog
FrameRect
GetDC
GetDlgItem
GetDlgItemTextW
CharUpperBuffW
GetWindowLongW
IsCharAlphaW
IsDlgButtonChecked
LoadCursorW
LoadStringW
MessageBoxW
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
SetWindowLongW
TranslateAcceleratorW
UnhookWindowsHookEx
CallWindowProcW
GetKeyState
advapi32
RegOpenKeyA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52361 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52362 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52363 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52364 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52365 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52366 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52367 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data67 Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ