Static task
static1
Behavioral task
behavioral1
Sample
07eb1ad08aa3d96665b6072450c32c4d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07eb1ad08aa3d96665b6072450c32c4d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07eb1ad08aa3d96665b6072450c32c4d_JaffaCakes118
-
Size
183KB
-
MD5
07eb1ad08aa3d96665b6072450c32c4d
-
SHA1
8fc4f87aae75c50996ba8ff54fb23f90ccf9f214
-
SHA256
e0e9bb31644e1008fb7b9dee66418b538a5db282092c020a4f72ee10b3fef737
-
SHA512
5175248da823d464fecdbac55e12eb214adb070f1718034f6cef1bacb15fb928c304619b8b641103654646b8cb86a0ae4ac37791eb265b24f58865a721b292d3
-
SSDEEP
3072:3Wq+qH+1j2XpGZLfLaLiPZnbq+tNR+cEY+muCAxcNEqAHw6E:3Wq+e6jEpwf+LONTYfmu5xcNEo6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07eb1ad08aa3d96665b6072450c32c4d_JaffaCakes118
Files
-
07eb1ad08aa3d96665b6072450c32c4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
b50b57acbc3ed9d0a3590911a62f3a6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowRect
KillTimer
GetWindowLongW
GetWindowDC
IsZoomed
GetWindowLongA
IsWindowVisible
GetTopWindow
IntersectRect
IsDialogMessageA
InvalidateRect
GetSysColorBrush
IsChild
GetWindow
GetSubMenu
InsertMenuA
InsertMenuItemA
IsIconic
GetSystemMenu
GetWindowPlacement
IsRectEmpty
IsWindow
IsWindowUnicode
InflateRect
IsWindowEnabled
GetSysColor
GetWindowThreadProcessId
IsDialogMessageW
GetWindowTextA
GetScrollRange
kernel32
GetLastError
GetACP
GetModuleHandleA
ExitProcess
VirtualAlloc
IsBadHugeReadPtr
GetCommandLineW
ExitThread
GetCommandLineA
lstrlenA
GetProcAddress
lstrlenW
LoadLibraryExA
GetOEMCP
shlwapi
SHGetValueA
PathGetCharTypeA
PathFileExistsA
SHQueryInfoKeyA
SHEnumValueA
SHDeleteValueA
SHStrDupA
SHDeleteKeyA
SHSetValueA
SHQueryValueExA
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ