Static task
static1
Behavioral task
behavioral1
Sample
0b0290a2c4297f612f056de69baf091b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b0290a2c4297f612f056de69baf091b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0b0290a2c4297f612f056de69baf091b_JaffaCakes118
-
Size
27KB
-
MD5
0b0290a2c4297f612f056de69baf091b
-
SHA1
21c14fa0bf5f949dde3877b2c24f109eb445997c
-
SHA256
1e31e1c26b225ee19d25eaec0a2c9c0dcf8a5bfcea1ba03255c326549060ec22
-
SHA512
51c7c2750b058fb731b1105a0f221400b4e0f7726f94f1b3937db030a83333e62171c70bd57bea82bf71a57ba05f33b147e79adb1a8f2613dc3b7386ac9c2399
-
SSDEEP
384:5ccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccN:Si7UTyiWylpPtJPHAhj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b0290a2c4297f612f056de69baf091b_JaffaCakes118
Files
-
0b0290a2c4297f612f056de69baf091b_JaffaCakes118.exe windows:4 windows x86 arch:x86
8ac176ba23651d9cb757ec6846453f56
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
GetModuleHandleA
CreateEventA
lstrlenA
LocalAlloc
GetCommandLineA
GetStdHandle
LocalFree
gdi32
GetTextExtentPoint32A
GetStockObject
SetPixel
GetTextMetricsA
GetTextColor
GetBkColor
CreateSolidBrush
CreateCompatibleDC
SetROP2
MoveToEx
PatBlt
GetPixel
ExtTextOutA
GetObjectA
LineTo
BitBlt
msvcrt
_c_exit
wcschr
wcslen
_initterm
_acmdln
__setusermatherr
user32
DestroyWindow
GetFocus
GetSysColor
GetMessageA
BeginPaint
DispatchMessageA
MessageBoxA
LoadIconA
CreateWindowExA
PostQuitMessage
EndPaint
SetFocus
SetWindowTextA
EndDialog
ScreenToClient
ShowWindow
DefWindowProcA
GetClientRect
DialogBoxParamA
GetWindowRect
TranslateMessage
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ