Static task
static1
Behavioral task
behavioral1
Sample
011b8cccbdf129217dfb00e3f47e1872_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
011b8cccbdf129217dfb00e3f47e1872_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
011b8cccbdf129217dfb00e3f47e1872_JaffaCakes118
-
Size
372KB
-
MD5
011b8cccbdf129217dfb00e3f47e1872
-
SHA1
8b57b8382db18934abca4b55d0702a40584b73c7
-
SHA256
e7518177b8d694a3bda2842196e111e01add7c91df460d47156ca5a5834ae7fd
-
SHA512
400033ec5a28733bd9f7900cc40ea52945109910a9b89ad56062c535badd51d605cb0c1bf9a8e1b424ba12f036026a6683296d9aede75acfe9917ee26d116ee0
-
SSDEEP
6144:6oRBN7rCXDteZ1ZGzEXIBGKjxqbfygVpGDjwj4vZKxW7qmpEXuIIc/SpzWJgpJDo:6ovN7rCX5s1ZJ4Y1Dj4vZ4PpEcap6Un
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 011b8cccbdf129217dfb00e3f47e1872_JaffaCakes118
Files
-
011b8cccbdf129217dfb00e3f47e1872_JaffaCakes118.exe windows:4 windows x86 arch:x86
9339dc02287ba337c266d6b1cfbc09f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetDesktopWindow
GetWindowLongW
IsDialogMessageA
SetWindowTextA
SetWindowPos
GetSysColor
ScrollWindow
GetSysColorBrush
IsDialogMessageW
EndPaint
ScreenToClient
SetWindowPlacement
GetMessagePos
CallWindowProcA
LoadBitmapA
GetCursorPos
IsWindowUnicode
GetMenuItemCount
DefFrameProcA
LoadCursorA
IsWindow
GetParent
CreateWindowExA
CharNextW
CharToOemA
GetScrollPos
GetKeyboardLayout
EnumWindows
ShowScrollBar
GetDlgItem
DrawTextA
SystemParametersInfoA
SetTimer
GetDC
LoadKeyboardLayoutA
GetClassNameA
OpenClipboard
GetWindow
RegisterWindowMessageA
RedrawWindow
SetWindowsHookExA
CharNextA
DrawEdge
GetClassInfoA
ShowOwnedPopups
GetActiveWindow
SetScrollRange
DrawIcon
GetWindowDC
GetKeyboardType
LoadStringA
LoadIconA
GetLastActivePopup
SetCapture
AdjustWindowRectEx
GetClientRect
SetScrollInfo
GetCursor
TranslateMDISysAccel
TranslateMessage
MoveWindow
SetForegroundWindow
SetWindowLongA
InsertMenuItemA
ShowWindow
GetKeyboardLayoutList
MessageBeep
GetDCEx
EnumThreadWindows
FindWindowA
SetMenu
OemToCharA
InvalidateRect
EnumChildWindows
EnableMenuItem
GetWindowTextA
IntersectRect
SetActiveWindow
GetWindowPlacement
UnhookWindowsHookEx
DestroyWindow
CloseClipboard
CreateIcon
version
VerFindFileA
VerInstallFileA
GetFileVersionInfoSizeA
kernel32
ExitThread
IsBadReadPtr
GetCommandLineA
GetVersionExA
GetLastError
LoadLibraryExA
GetOEMCP
GetProcAddress
VirtualAlloc
GlobalAlloc
LoadLibraryA
GetCommandLineW
VirtualAllocEx
GetModuleHandleA
comctl32
ImageList_Remove
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES0 Size: 512B - Virtual size: 21B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES3 Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 1024B - Virtual size: 646B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ