Static task
static1
Behavioral task
behavioral1
Sample
f5853d1540cf174aabb2e1f662d3c4d9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5853d1540cf174aabb2e1f662d3c4d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5853d1540cf174aabb2e1f662d3c4d9_JaffaCakes118
-
Size
33KB
-
MD5
f5853d1540cf174aabb2e1f662d3c4d9
-
SHA1
68a371a17d53605580d42ded929d49588d42e18b
-
SHA256
4683e2fbc2021c59c4cc3c1d2765a0647e1cedc8ad4f5c346aba637958e8f010
-
SHA512
0867fc1d709dd7f7f6ea6daae61fe1e3306a595abffa4ad195a555595007de448baef065c2d0da0b5338c495322ebdd79456eb36d94094f6b928204d6e261004
-
SSDEEP
768:IMRKHBIQZXBU8tX0VX68AAKO+MzNBKN4:Ibh/ZX68tX0VXYAD+Mqq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5853d1540cf174aabb2e1f662d3c4d9_JaffaCakes118
Files
-
f5853d1540cf174aabb2e1f662d3c4d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
0fa99002b16ee14db7f28bab41fae08f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetDlgItemTextA
SetCapture
SendMessageA
ReleaseCapture
SetWindowLongA
MessageBoxA
InvalidateRect
GetWindowRect
GetParent
PtInRect
GetDlgItem
GetDlgCtrlID
GetCursorPos
GetCapture
GetActiveWindow
EndDialog
DialogBoxParamA
CallWindowProcA
kernel32
lstrlenA
lstrcpyA
WriteFile
SetFilePointer
ReadFile
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetModuleHandleA
CloseHandle
CopyFileA
CreateFileA
ExitProcess
GetFileSize
shell32
ShellExecuteA
gdi32
SetTextColor
SetBkMode
SelectObject
GetStockObject
GetObjectA
CreateFontIndirectA
comdlg32
GetOpenFileNameA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jgd Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE