Static task
static1
Behavioral task
behavioral1
Sample
f993316983e77de72f4b1c69b2f55096_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f993316983e77de72f4b1c69b2f55096_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f993316983e77de72f4b1c69b2f55096_JaffaCakes118
-
Size
254KB
-
MD5
f993316983e77de72f4b1c69b2f55096
-
SHA1
37b2d0b7712fe734364f063feb7281ee9a90dda7
-
SHA256
7beb18eb319097646049e624f9a4ff02976a8cd917603fe22d7f481616b3e91b
-
SHA512
1ba86ace045bbeb795de66527327d89f82778f4760ebf0241ddf22f3260187fdb4194d1c4760984e964df450712bf48c767027b5d680998269bfbf59cc9bcde9
-
SSDEEP
3072:j6b3Y3Fv+f02rtGxj4OwmKy+fv7IkRYMLW+mAXrRt8x6o7Piv2Piv2Piv2Piv:jsI1mztGSH7I8YMLx32ppp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f993316983e77de72f4b1c69b2f55096_JaffaCakes118
Files
-
f993316983e77de72f4b1c69b2f55096_JaffaCakes118.exe windows:5 windows x86 arch:x86
d822ec60d9f59eb7c5de4e89adce7d7a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetLastError
LoadLibraryA
user32
CheckRadioButton
CreateWindowExW
DefWindowProcW
DialogBoxParamW
DrawFocusRect
EnableMenuItem
EndDialog
FrameRect
GetDC
GetDlgItem
GetDlgItemTextW
CharUpperBuffW
GetWindowLongW
IsCharAlphaW
IsDlgButtonChecked
LoadCursorW
LoadStringW
MessageBoxW
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
SetWindowLongW
TranslateAcceleratorW
UnhookWindowsHookEx
CallWindowProcW
GetKeyState
advapi32
RegOpenKeyA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52361 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52362 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52363 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52364 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52365 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52366 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52367 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data67 Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ