Static task
static1
Behavioral task
behavioral1
Sample
f60079353fa5bb8877fd3ff3d4d23e57_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f60079353fa5bb8877fd3ff3d4d23e57_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f60079353fa5bb8877fd3ff3d4d23e57_JaffaCakes118
-
Size
121KB
-
MD5
f60079353fa5bb8877fd3ff3d4d23e57
-
SHA1
e177fc62f9ca422534a5882e9459a0346c4c707a
-
SHA256
f7a752a44d81301d77830897bf7dd11211d921a58c0485f49b98aad39b6d845a
-
SHA512
7fd513fe290a09efc19e603ac57e0e652df465afc495965a36c66572e07df4706ecb9cc79e11548022bf47a37b929c8b2c16c4ef357ee1c0c643d2ab9eded2d7
-
SSDEEP
1536:jNxxmEDtqrQ8NSP5re9zSCREd+blIUuKSbT10Zu3hpqlH0:RxQEDtqrQ5re9BS+blIpNtix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f60079353fa5bb8877fd3ff3d4d23e57_JaffaCakes118
Files
-
f60079353fa5bb8877fd3ff3d4d23e57_JaffaCakes118.exe windows:4 windows x86 arch:x86
9dfe3650a0316b3d237fb157b095d9f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDIBColorTable
GetDCOrgEx
CreatePalette
SelectPalette
SetTextColor
GetCurrentPositionEx
user32
RegisterClipboardFormatA
GetKeyboardState
GetKeyboardLayout
SetFocus
IsRectEmpty
InflateRect
OffsetRect
RemoveMenu
IsWindowUnicode
AdjustWindowRectEx
CharUpperBuffA
CallWindowProcA
SetTimer
GetMessagePos
BeginPaint
SendMessageW
GetScrollRange
IsDialogMessageW
DrawIcon
SetActiveWindow
DrawMenuBar
SetScrollPos
SetWindowPlacement
RegisterWindowMessageA
GetDCEx
ShowOwnedPopups
CheckMenuItem
OemToCharA
GetScrollInfo
EnumWindows
SetCapture
CreateWindowExA
IntersectRect
GetPropA
GetDC
GetCursor
GetWindowLongA
GetClassLongA
GetMenuItemCount
SetParent
GetMenuItemInfoA
RegisterClassA
InvalidateRect
CharLowerBuffA
GetActiveWindow
PeekMessageA
DestroyIcon
EmptyClipboard
EnumThreadWindows
LoadIconA
DrawEdge
ChildWindowFromPoint
DefFrameProcA
wsprintfA
PeekMessageW
DestroyWindow
SetWindowTextA
GetWindowTextA
IsZoomed
IsDialogMessageA
GetFocus
SetWindowPos
EndPaint
DrawIconEx
FrameRect
MessageBoxA
WaitMessage
PostMessageA
KillTimer
IsChild
GetMenuState
GetForegroundWindow
DispatchMessageA
DefWindowProcA
SetMenuItemInfoA
RemovePropA
GetKeyNameTextA
LoadCursorA
SetClipboardData
ShowWindow
CharLowerA
GetWindowRect
GetKeyboardType
EnableWindow
SetWindowLongW
GetSysColor
DefMDIChildProcA
DestroyCursor
UnhookWindowsHookEx
OpenClipboard
GetKeyboardLayoutList
FillRect
TranslateMessage
GetCapture
InsertMenuA
kernel32
VirtualAllocEx
SetHandleCount
InitializeCriticalSection
lstrcatA
lstrcpynA
lstrlenA
ReadFile
GetLocalTime
GetCurrentThreadId
VirtualFree
GetEnvironmentStrings
GetModuleHandleA
GetProcAddress
GlobalAddAtomA
LocalFree
SetEvent
ExitProcess
GetOEMCP
shell32
SHGetFileInfoA
version
VerFindFileA
Sections
CODE Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE