Static task
static1
Behavioral task
behavioral1
Sample
0faa980a883d6628add01cbe4070d753_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0faa980a883d6628add01cbe4070d753_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
0faa980a883d6628add01cbe4070d753_JaffaCakes118
-
Size
33KB
-
MD5
0faa980a883d6628add01cbe4070d753
-
SHA1
08cea69fc3b42573afbdb0639155c8eb87d15381
-
SHA256
1ecc7fef34e79cc1cc337f67b871047bff234cbd3bda53d7a8c4ac9351a39562
-
SHA512
b4b022c9364aacadff056298860136fe75e893a5f8218f04f8d3bb0fbae3cc06bfbff5cd2e08e2d00be5619ed4db7ff32a086978ac5a8fe0d4b7d1ff7e13b848
-
SSDEEP
768:OXIjExug1pr3MyIg/XbqE2Vennnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn+:HjAZXfs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0faa980a883d6628add01cbe4070d753_JaffaCakes118
Files
-
0faa980a883d6628add01cbe4070d753_JaffaCakes118.exe windows:4 windows x86 arch:x86
a584dd4cf4147ceeef5c695ee94c58ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
ExitProcess
user32
BlockInput
CharPrevExA
CharUpperBuffA
ChildWindowFromPoint
CreateDialogParamA
DrawEdge
DrawTextA
EndDialog
FillRect
GetClassInfoExA
GetClassLongA
GetDC
GetNextDlgGroupItem
GetTopWindow
GetWindowDC
InvalidateRect
OpenInputDesktop
PeekMessageA
RegisterWindowMessageA
SendIMEMessageExA
SendMessageA
SetDlgItemInt
SetFocus
SetShellWindow
SetWindowTextA
ValidateRgn
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 778B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ