Static task
static1
Behavioral task
behavioral1
Sample
050c4f368ad0fb42a8e3e3ff45e2e48a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
050c4f368ad0fb42a8e3e3ff45e2e48a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
050c4f368ad0fb42a8e3e3ff45e2e48a_JaffaCakes118
-
Size
29KB
-
MD5
050c4f368ad0fb42a8e3e3ff45e2e48a
-
SHA1
f63bf62129b999cc3691aec0c9e314264b590637
-
SHA256
e79b3ee719e619bd8a89a04d14f1183cac8e55f68f5c5037a0d75188606edaf8
-
SHA512
1b0b9525fcab7ea514601192ef20853d05cce48a25fdf1ddc5da94c1245c814ea7b671d59fef8c5f42dd11651211291f52a53a55dc5a251151994f8bed17404f
-
SSDEEP
768:XVoBlrvZDRV41yEvwwInGXiH8letGOE36gba4:yBlNDD40EpZm8MtmqsV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 050c4f368ad0fb42a8e3e3ff45e2e48a_JaffaCakes118
Files
-
050c4f368ad0fb42a8e3e3ff45e2e48a_JaffaCakes118.exe windows:4 windows x86 arch:x86
47d5164e4a99379160d45bc0161597ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
LoadIconA
OffsetRect
DispatchMessageA
SetWindowPos
GetSystemMetrics
GetParent
TranslateMessage
GetMessageA
wsprintfA
PostMessageA
GetWindowRect
GetDesktopWindow
IsDialogMessageA
CreateDialogParamA
ShowWindow
LoadImageA
GetWindowLongA
PostQuitMessage
MessageBoxA
DestroyWindow
GetDlgItem
kernel32
FlushFileBuffers
CreateThread
IsBadReadPtr
SetHandleCount
GetStdHandle
GetTimeZoneInformation
LCMapStringA
GetEnvironmentStringsW
SetStdHandle
HeapCreate
GetOEMCP
CreateProcessA
lstrlenA
GetCPInfo
WaitForSingleObject
HeapSize
IsBadCodePtr
GetVersionExA
VirtualFree
ExitProcess
HeapReAlloc
LoadLibraryA
GetACP
WriteFile
GetTempPathA
VirtualAlloc
ReadFile
CompareStringA
CreateFileA
GetFileSize
HeapDestroy
CompareStringW
DeleteFileA
LCMapStringW
ResumeThread
FreeEnvironmentStringsW
CreateDirectoryA
SetEnvironmentVariableA
GetCurrentProcess
SetThreadPriority
SetFilePointer
IsBadWritePtr
GetEnvironmentStrings
LockFileEx
GetEnvironmentVariableA
RemoveDirectoryA
GetLocalTime
GetSystemTime
HeapFree
GetStartupInfoA
GetFileType
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
GetStringTypeW
WideCharToMultiByte
GetStringTypeA
CancelWaitableTimer
UnhandledExceptionFilter
GetModuleFileNameA
comctl32
InitCommonControlsEx
winspool.drv
ResetPrinterW
ole32
CoInitialize
CoUninitialize
Sections
.itext Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
bc7823gx Size: 13KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ