Static task
static1
Behavioral task
behavioral1
Sample
0c3f9b9d457db90cad453144e891a153_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0c3f9b9d457db90cad453144e891a153_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c3f9b9d457db90cad453144e891a153_JaffaCakes118
-
Size
107KB
-
MD5
0c3f9b9d457db90cad453144e891a153
-
SHA1
b9d55eb5b2ae01368d83b8543d6801e963b2371f
-
SHA256
ac69ed6be77ed27807538a17f0ebd1691c4bf86adc7c44edf9e643aec1367b5f
-
SHA512
2fe1b25b8cea01de30cba672aa57ebb75251b2b5dfbe0b7ff45aa2fe40477022252bc5a3b72b0d3d2421200a13a5f97eb30eeb32a598250f4bd9c0d286267800
-
SSDEEP
1536:bkayR01alhPDmb/PUUa3QRemOAZT+R+LUdxQC4ZhvfINm6YlvFQcmfnjfHwYV:KR0GkbLa3qs+fLUdSZhomJl+cmfj5V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c3f9b9d457db90cad453144e891a153_JaffaCakes118
Files
-
0c3f9b9d457db90cad453144e891a153_JaffaCakes118.exe windows:4 windows x86 arch:x86
c12b2011ed3c7046220c5744daf2ce6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetClipboardData
SetDlgItemTextA
SetTimer
SetCaretPos
SendMessageA
SetCapture
ShowCaret
ShowWindow
TranslateMessage
UpdateWindow
ReleaseCapture
RegisterClassA
PostQuitMessage
OpenClipboard
MessageBoxA
LoadCursorA
KillTimer
InvalidateRect
HideCaret
GetWindowRect
GetSystemMetrics
GetMessageA
GetDC
EndPaint
GetCursorPos
GetClipboardData
DispatchMessageA
EndDialog
DragDetect
DefWindowProcA
DialogBoxParamA
DestroyWindow
CloseClipboard
CreateWindowExA
CreateCaret
SetWindowPos
BeginPaint
SetWindowRgn
kernel32
lstrlenA
lstrcpyA
Sleep
LoadLibraryA
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetProcAddress
GetModuleHandleA
FreeLibrary
ExitProcess
CreateThread
gdi32
TextOutA
SetTextColor
SelectObject
GetCharWidthA
SetBkMode
CreatePolygonRgn
CreateEllipticRgn
DeleteObject
CreateCompatibleDC
CombineRgn
CreateDIBitmap
BitBlt
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ