Static task
static1
Behavioral task
behavioral1
Sample
f6c205ad76629acc1a9a267cd226c090_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6c205ad76629acc1a9a267cd226c090_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f6c205ad76629acc1a9a267cd226c090_JaffaCakes118
-
Size
119KB
-
MD5
f6c205ad76629acc1a9a267cd226c090
-
SHA1
d0de662079914e2a285c174023a5694b4870b672
-
SHA256
c96588f8214ddd88c4e5130082bda1c0846fd951aea59ee2f8d62c69f322d695
-
SHA512
bff23834b2207198424137fa314c03d6fb778c616a632d18a64cca0b5361667e318e1c09e02423b6aeed7f50fe03f33b2fdaa3295672e23ebb0de13ae07ca777
-
SSDEEP
1536:ZIbT1l+40FVyvefmZwBhWeDbLDhXBkm6+dyZ65bpY1zF5C+b1HdgqsY7QqLgwF:ZI/2dqcBh1Tkyws5bpY1R5Ci/gVqLg6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6c205ad76629acc1a9a267cd226c090_JaffaCakes118
Files
-
f6c205ad76629acc1a9a267cd226c090_JaffaCakes118.exe windows:4 windows x86 arch:x86
4f12f172c237582875728390850df086
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetScrollRange
SetWindowLongA
GetMenuItemInfoA
PostQuitMessage
GetFocus
DrawIcon
LoadKeyboardLayoutA
DestroyWindow
PeekMessageA
SetMenu
SetClipboardData
GetDC
SetFocus
IsZoomed
GetClassNameA
RegisterWindowMessageA
WindowFromPoint
EnableWindow
EnumThreadWindows
MapWindowPoints
ChildWindowFromPoint
SetRect
GetTopWindow
SetWindowPlacement
OffsetRect
UpdateWindow
EndPaint
GetIconInfo
GetDCEx
MsgWaitForMultipleObjects
IsIconic
GetSysColorBrush
GetClassInfoA
SetTimer
CreatePopupMenu
FillRect
CreateWindowExA
CloseClipboard
GetSubMenu
IsWindow
GetSysColor
LoadIconA
SetMenuItemInfoA
EqualRect
GetSystemMetrics
DispatchMessageA
CharLowerA
EnableMenuItem
DrawFrameControl
GetWindowRect
TrackPopupMenu
GetSystemMenu
GetClipboardData
GetCursor
DispatchMessageW
DefWindowProcA
DrawTextA
DeleteMenu
BeginPaint
EnableScrollBar
GetWindowDC
SetWindowLongW
MapVirtualKeyA
GetScrollPos
SetWindowsHookExA
InsertMenuA
OpenClipboard
SetCapture
IsWindowVisible
IsDialogMessageA
OemToCharA
FindWindowA
RegisterClipboardFormatA
SetScrollInfo
GetClientRect
GetCursorPos
GetCapture
PtInRect
CheckMenuItem
ReleaseCapture
TranslateMessage
GetMenuItemCount
DrawEdge
ShowScrollBar
DestroyCursor
CharNextA
GetParent
DrawAnimatedRects
SetScrollRange
IsChild
MessageBoxA
GetDesktopWindow
IsRectEmpty
CallWindowProcA
InvalidateRect
DrawIconEx
GetKeyboardLayoutList
GetMenuState
SetCursor
advapi32
GetUserNameA
oleaut32
SysAllocStringLen
SysReAllocStringLen
SysFreeString
OleLoadPicture
SafeArrayPtrOfIndex
SafeArrayUnaccessData
VariantChangeType
RegisterTypeLib
GetErrorInfo
gdi32
LineTo
CopyEnhMetaFileA
GetDIBColorTable
SelectPalette
CreateCompatibleDC
GetRgnBox
CreateBrushIndirect
CreateBitmap
kernel32
GetLastError
ReadFile
MulDiv
ExitProcess
GetThreadLocale
GetProcAddress
ExitThread
VirtualAlloc
RaiseException
MoveFileExA
lstrcpynA
GetModuleHandleA
GetDateFormatA
HeapAlloc
CreateEventA
shell32
SHGetDiskFreeSpaceA
version
GetFileVersionInfoA
VerFindFileA
VerInstallFileA
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE