Static task
static1
Behavioral task
behavioral1
Sample
f66f0e7660dcbdc5eadf2f374ad0b08e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f66f0e7660dcbdc5eadf2f374ad0b08e_JaffaCakes118
-
Size
9KB
-
MD5
f66f0e7660dcbdc5eadf2f374ad0b08e
-
SHA1
3a3a2284d238e22bc018f85ce528152041aef056
-
SHA256
567e46f897bbcb0aecbb70836bb07fbf9317d0388ff2dfd8af64dff31c8cbd54
-
SHA512
113457ed1652e1e29b61809af684110fbdf5202fac8477c09e83290f93238bbe7c2bf4fac8cc6b39560e2f1b79f08431d27c33be3e4947f5face21167b742b7b
-
SSDEEP
192:F8N7dK1Q1vp9dqGUhR4gI5f5b22Aj6hUWWF0fUVQEU1:FOdK1WERMYWTflEU1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f66f0e7660dcbdc5eadf2f374ad0b08e_JaffaCakes118
Files
-
f66f0e7660dcbdc5eadf2f374ad0b08e_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c439904c6f7945bcdcabbb78eed1a70
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
CreateWaitableTimerW
DisableThreadLibraryCalls
EndUpdateResourceA
EnumCalendarInfoExW
ExitProcess
GetPrivateProfileSectionNamesA
GetPrivateProfileStructW
GetProfileIntA
GetProfileSectionA
GetTimeFormatA
LocalFlags
ReadConsoleInputW
ScrollConsoleScreenBufferA
SetConsoleCP
VirtualFreeEx
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
lstrcmpiW
user32
CallMsgFilter
ChangeClipboardChain
CharUpperBuffW
CheckMenuItem
CreateCursor
DdeAddData
DdeConnectList
DlgDirSelectExA
FlashWindow
GetAncestor
GetClientRect
GetKeyState
GetSysColor
IsCharAlphaNumericW
MsgWaitForMultipleObjects
SetLastErrorEx
SetWindowTextW
TileChildWindows
ValidateRect
wvsprintfW
gdi32
CheckColorsInGamut
Chord
CreateHatchBrush
CreatePen
CreatePolyPolygonRgn
CreateRectRgnIndirect
DeleteDC
DrawEscape
EnableEUDC
GdiPlayDCScript
GetBkMode
GetCharWidthFloatA
GetClipBox
GetEnhMetaFilePaletteEntries
GetGlyphOutline
GetRandomRgn
GetTextExtentPointW
GetWindowExtEx
OffsetWindowOrgEx
SetICMProfileW
SetPixelFormat
SetTextJustification
Sections
.text Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ