Static task
static1
Behavioral task
behavioral1
Sample
0fed324b826908324f3830205f77cb5f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0fed324b826908324f3830205f77cb5f_JaffaCakes118
-
Size
62KB
-
MD5
0fed324b826908324f3830205f77cb5f
-
SHA1
aa14dee9b9e497e030f38dddbd5835db4ac71c21
-
SHA256
c0105456da08eacc43e266a32f550316218c3f256d920eea69f218e10622ec19
-
SHA512
4ca1e517ef30caa391d97bd4c2c65682ad603f37d2da55a5e4380bf1dd36ce1bc80d4b34107c923d53c6a79fad6832673c0188c16cfcaf93aa937b26617a56ad
-
SSDEEP
1536:GGPegsVpDKNSf+owoS9Po8TwYwMPtd/BqDIkp:xdCpKM+oGBbw6td/BWv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fed324b826908324f3830205f77cb5f_JaffaCakes118
Files
-
0fed324b826908324f3830205f77cb5f_JaffaCakes118.exe windows:5 windows x86 arch:x86
3297f6daf3f7338bfe0a45be886ec9e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextA
FillRect
GetCapture
GetWindowLongA
GetMenuItemCount
GetWindowDC
ChangeMenuA
GetDC
GetClientRect
GetForegroundWindow
SetFocus
GetDlgCtrlID
GetWindow
CheckDlgButton
GetMessagePos
GetSysColorBrush
EndPaint
SetWindowLongW
GetActiveWindow
DragObject
GetParent
ole32
CoCreateInstance
GetHGlobalFromStream
OleSaveToStream
StringFromGUID2
CoSetProxyBlanket
StgCreateDocfileOnILockBytes
OleRegGetUserType
ProgIDFromCLSID
BindMoniker
kernel32
GetExitCodeThread
GetCurrentProcessId
lstrlenW
SetHandleCount
OpenMutexA
IsValidCodePage
ExitProcess
GetOEMCP
IsDBCSLeadByte
lstrcatW
DeleteFileA
GetLastError
VirtualAlloc
FindResourceA
DeleteFileW
GetFileAttributesA
OutputDebugStringA
GetCurrentThreadId
SetUnhandledExceptionFilter
GlobalLock
GetLocalTime
msvcrt
__p__osver
isalpha
wcsrchr
__p__iob
time
__p__commode
rand
_ltow
malloc
swprintf
qsort
__set_app_type
_finite
__setusermatherr
swscanf
wcsncmp
_rotl
srand
atoi
wcsncpy
__wgetmainargs
__p__fmode
_exit
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 485B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ