Static task
static1
Behavioral task
behavioral1
Sample
0285e136a1c7d3d67d7a2e5010485f7b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0285e136a1c7d3d67d7a2e5010485f7b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0285e136a1c7d3d67d7a2e5010485f7b_JaffaCakes118
-
Size
187KB
-
MD5
0285e136a1c7d3d67d7a2e5010485f7b
-
SHA1
884d8c191f4906e5f4fdb833a55799e2027cecc5
-
SHA256
d9c9056dfb7dd9064532a0109897a3bf359b750e6377d36e06dfcd155bd56cd0
-
SHA512
4b7f1e15872496e0872a7d517ba7f8b7769415a4deaf47a5d3c85cafcd3cdb02017734c1fb7ca64a90e10efd0fd5b330b78b31d9f1174b13c2d61e183f2365d5
-
SSDEEP
3072:zTt8VepOu/6VroxVpQ5d1usIu4kUVsGxZ0ufzyLFh+6sbPS7:QQTyVcVk1DIFxVsGD3+ph+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0285e136a1c7d3d67d7a2e5010485f7b_JaffaCakes118
Files
-
0285e136a1c7d3d67d7a2e5010485f7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
5654f548d4d72ad61a29ab598908be95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GetACP
ResetEvent
GetModuleHandleA
ExitProcess
HeapAlloc
VirtualAllocEx
SetThreadLocale
GetVersionExA
GetLastError
GetProcAddress
LocalAlloc
GetOEMCP
GetCommandLineA
VirtualAlloc
ExitThread
version
VerFindFileA
user32
SetClassLongA
GetKeyboardState
OpenClipboard
InflateRect
ShowScrollBar
GetWindowTextA
SetWindowTextA
CharNextA
CheckMenuItem
RegisterWindowMessageA
DispatchMessageW
GetClassNameA
DestroyCursor
MapWindowPoints
GetKeyboardLayout
GetForegroundWindow
CreateWindowExA
CloseClipboard
GetDesktopWindow
DestroyWindow
RegisterClassA
GetClientRect
DefWindowProcA
GetKeyboardLayoutList
GetMenuState
IsWindowUnicode
GetWindowThreadProcessId
DispatchMessageA
EnableScrollBar
SetMenu
FrameRect
GetSubMenu
GetKeyboardLayoutNameA
ChildWindowFromPoint
GetCursor
MessageBeep
IsChild
DestroyMenu
GetLastActivePopup
GetSysColorBrush
SetScrollPos
RedrawWindow
PostQuitMessage
DrawMenuBar
AdjustWindowRectEx
DestroyIcon
GetSysColor
FindWindowA
SendMessageA
WindowFromPoint
GetWindowRect
ScreenToClient
InsertMenuA
GetTopWindow
IsWindowVisible
GetMenu
SetScrollRange
MsgWaitForMultipleObjects
MoveWindow
CreateMenu
UpdateWindow
CharLowerBuffA
GetWindowDC
LoadCursorA
SetFocus
DrawAnimatedRects
GetWindowLongW
GetClassLongA
GetDlgItem
UnregisterClassA
SetScrollInfo
GetMenuItemCount
GetKeyNameTextA
GetKeyState
GetScrollRange
SetTimer
BeginPaint
CharNextW
SetActiveWindow
OemToCharA
DefMDIChildProcA
LoadStringA
RegisterClipboardFormatA
GetSystemMetrics
GetMenuItemID
SetCursor
LoadIconA
CallWindowProcA
DefFrameProcA
GetSystemMenu
GetDC
GetWindow
GetIconInfo
RemovePropA
EndPaint
TranslateMessage
CreatePopupMenu
MessageBoxA
SetPropA
SetWindowsHookExA
wsprintfA
KillTimer
GetScrollPos
SetParent
ReleaseCapture
GetPropA
GetCursorPos
EnumThreadWindows
TrackPopupMenu
PeekMessageA
EnableMenuItem
EnableWindow
IsRectEmpty
GetClipboardData
InvalidateRect
CharToOemA
GetWindowPlacement
ShowOwnedPopups
DeleteMenu
ClientToScreen
RemoveMenu
IsIconic
IntersectRect
PostMessageA
IsDialogMessageA
MapVirtualKeyA
GetCapture
EqualRect
CreateIcon
FillRect
LoadBitmapA
GetWindowLongA
IsWindow
SetRect
TranslateMDISysAccel
CallNextHookEx
IsZoomed
GetParent
PtInRect
CharLowerA
CharUpperBuffA
GetKeyboardType
DrawEdge
DrawIcon
OffsetRect
GetDCEx
GetFocus
GetClassInfoA
DrawFrameControl
EmptyClipboard
LoadKeyboardLayoutA
DrawTextA
WaitMessage
ActivateKeyboardLayout
EnumWindows
GetMenuItemInfoA
IsDialogMessageW
SetMenuItemInfoA
PeekMessageW
SetClipboardData
GetActiveWindow
ReleaseDC
ShowWindow
DrawIconEx
SetCapture
GetMenuStringA
InsertMenuItemA
EnumChildWindows
ScrollWindow
GetMessagePos
IsWindowEnabled
UnhookWindowsHookEx
SendMessageW
SetWindowPos
SystemParametersInfoA
gdi32
SetTextColor
GetPaletteEntries
CreateDIBitmap
GetBitmapBits
CreateDIBSection
CreateBitmap
RestoreDC
GetRgnBox
GetCurrentPositionEx
shell32
Shell_NotifyIconA
DragQueryFileA
SHGetFileInfoA
SHGetSpecialFolderLocation
Sections
CODE Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 143KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ