?_CreateBitmap@@YGKKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
f56b1e474daf9e278b3494a5b3e2a9b1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f56b1e474daf9e278b3494a5b3e2a9b1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f56b1e474daf9e278b3494a5b3e2a9b1_JaffaCakes118
-
Size
47KB
-
MD5
f56b1e474daf9e278b3494a5b3e2a9b1
-
SHA1
ee07d0f6203b2c7ea6c1ad4c0edd36cf9387410a
-
SHA256
d2e0c6058adb2a76873f179a6f63ad9f2d7ffc74e94d4e16775519acdcacd92e
-
SHA512
e5919ff1fd109dc6e6d299d63a6cf3a07b9ee2da254b2f358dd49453eefe584a641bfbb82ed871e2fa56353438a2398e5e2d89420d5413697d7bc11c42b35a83
-
SSDEEP
768:TmIlfhgXIIBMRJrTF18PT8l7RV45OIMVSHxkhOMvWtlHyQI5q:TvRuXBt85rf5V6fMvWLHyQI5q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f56b1e474daf9e278b3494a5b3e2a9b1_JaffaCakes118
Files
-
f56b1e474daf9e278b3494a5b3e2a9b1_JaffaCakes118.exe windows:5 windows x86 arch:x86
10ec7b36e7997a38b7c765f9d4316704
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ScreenToClient
DispatchMessageW
ShowScrollBar
IsZoomed
GetWindowLongA
GetDC
SetRectEmpty
GetUpdateRect
RegisterClassExA
IsCharAlphaW
GetScrollInfo
EnableWindow
MessageBoxExA
GetMessageExtraInfo
GetCursor
gdi32
GetTextFaceW
SetMagicColors
BeginPath
RectVisible
GetBkMode
GetViewportOrgEx
StartPage
GetTextColor
kernel32
SetUnhandledExceptionFilter
GetCommProperties
SetFilePointer
GetVersion
HeapReAlloc
TerminateThread
VirtualAlloc
Sleep
lstrlenW
GetNumberFormatA
OpenEventA
SetCommTimeouts
CloseHandle
shlwapi
StrTrimW
PathIsLFNFileSpecW
StrPBrkW
comctl32
CreateToolbarEx
ImageList_Destroy
Exports
Exports
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.XDAT Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ