Static task
static1
Behavioral task
behavioral1
Sample
0ba6841ed0b101f5ac182fff84c0a17a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ba6841ed0b101f5ac182fff84c0a17a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ba6841ed0b101f5ac182fff84c0a17a_JaffaCakes118
-
Size
133KB
-
MD5
0ba6841ed0b101f5ac182fff84c0a17a
-
SHA1
65ab6f1b12bfb00746b2469ffa0443995d949a20
-
SHA256
5da79b888f79dd6f2db44e3b62a468c865d39202ba8b5c09a081ca984fd33dee
-
SHA512
4dede93c5ce5ce1bc96d0358c2e8cc8428d0fe0f3f21584a9090b48d6fea6a0bb9c7eb1a1872594667b30329feb1a95cfb2aa560e12637abfbb5319fa2cad6fe
-
SSDEEP
3072:UAAPfDYFoRrDhv31gu3K4DYzyLsg+yMnNs6KY:UFkFoxhvau3pyg+yMNs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ba6841ed0b101f5ac182fff84c0a17a_JaffaCakes118
Files
-
0ba6841ed0b101f5ac182fff84c0a17a_JaffaCakes118.exe windows:4 windows x86 arch:x86
13352ace6020bf27bbf555b8a115f4f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
comctl32
InitCommonControlsEx
user32
SetMenu
InvalidateRgn
GetSysColorBrush
GetKeyState
MapDialogRect
GetNextDlgGroupItem
SetWindowPos
GetNextDlgTabItem
GetSystemMetrics
GetDlgItem
PeekMessageW
SetActiveWindow
PostQuitMessage
GetClientRect
LoadBitmapW
SetTimer
SetMenuItemBitmaps
CreateWindowExW
DestroyWindow
EnableWindow
EndDialog
GetMenuState
DrawIcon
EnableMenuItem
IsWindowEnabled
DispatchMessageW
GetCursorPos
SetWindowContextHelpId
GetDesktopWindow
GetParent
PostMessageW
ValidateRect
MessageBeep
GetWindowLongW
GetMenuCheckMarkDimensions
GetActiveWindow
ModifyMenuW
GetWindow
GetFocus
UpdateWindow
CheckMenuItem
CreateDialogIndirectParamW
IsWindow
IsWindowVisible
IsIconic
TranslateMessage
kernel32
CloseHandle
FreeLibrary
ReleaseSemaphore
GlobalAlloc
LoadResource
MultiByteToWideChar
FreeEnvironmentStringsW
LockResource
FindResourceW
GetModuleFileNameW
GetProcAddress
EnumResourceLanguagesA
CreateMutexW
SetCurrentDirectoryW
WaitForSingleObject
LoadLibraryW
ExitProcess
InterlockedExchange
CreateProcessW
lstrlenW
SizeofResource
GetModuleHandleW
GetLastError
CompareStringA
oledlg
OleUIBusyW
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ