?_GetCursorPos@@YGPAXKIG@Z
Static task
static1
Behavioral task
behavioral1
Sample
f9861ed985df53de73d4a9af368c706b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9861ed985df53de73d4a9af368c706b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9861ed985df53de73d4a9af368c706b_JaffaCakes118
-
Size
147KB
-
MD5
f9861ed985df53de73d4a9af368c706b
-
SHA1
2b95e414a74cc12a03a91abd2938550a2a9f7eae
-
SHA256
d7a444cf9f7345d1bb333881befa10903031c0961eea9ec50eae1fa2c6271872
-
SHA512
00fdf51c82e3d3fda009213a57b85b4a2ab0695dd0fa0d8f00f44cbaafe70850df1e1102f70bbbf78a19ff24ecee08664c9e870df33f3e8fa1c874281553c244
-
SSDEEP
3072:etiLBCjZ4F3XfOC4k8D8Mv82eou5yN31W7MU7lmLZq7q9wuXHasOI/4:JLoMXfOC4k8D8Mk2ej5yS73mZq7q9wuY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9861ed985df53de73d4a9af368c706b_JaffaCakes118
Files
-
f9861ed985df53de73d4a9af368c706b_JaffaCakes118.exe windows:5 windows x86 arch:x86
d846b26206927c7c80d4f04f8bfbb376
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCmpIW
StrPBrkA
PathBuildRootW
ord156
PathFindFileNameA
ChrCmpIW
shell32
SHCreateQueryCancelAutoPlayMoniker
kernel32
OpenWaitableTimerA
FindNextFileA
FileTimeToDosDateTime
EscapeCommFunction
SetCommState
lstrlenW
SetTapePosition
GetCommConfig
SetStdHandle
CreateFileMappingW
CloseHandle
GlobalAddAtomW
GlobalReAlloc
LoadLibraryExW
CreateWaitableTimerA
LoadLibraryExA
CreateEventW
lstrcatA
PeekNamedPipe
CreateJobObjectA
user32
GetKeyboardLayoutNameW
SetPropW
CreateMenu
CreateDesktopA
DefDlgProcW
GetMenuItemID
HideCaret
SendNotifyMessageW
GetDC
SetWindowContextHelpId
CreateIcon
SystemParametersInfoW
SendMessageCallbackW
GetMenuStringA
CheckDlgButton
SetMenu
WindowFromDC
UnhookWindowsHookEx
SetWindowTextW
GetScrollPos
CallWindowProcW
TranslateMDISysAccel
CheckMenuRadioItem
SetCaretPos
gdi32
Polygon
CreateEnhMetaFileA
CreateDiscardableBitmap
GetStockObject
GetEnhMetaFileHeader
SetTextCharacterExtra
GetMetaRgn
GetPaletteEntries
CreateFontIndirectW
SelectClipRgn
FixBrushOrgEx
FlattenPath
advapi32
AddAccessDeniedAce
AddAuditAccessObjectAce
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.icode Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MData Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MConst Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NData Size: 1024B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 890B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ