Static task
static1
Behavioral task
behavioral1
Sample
1060e7a9335c6d1af9f04e34ee54fa58_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1060e7a9335c6d1af9f04e34ee54fa58_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1060e7a9335c6d1af9f04e34ee54fa58_JaffaCakes118
-
Size
320KB
-
MD5
1060e7a9335c6d1af9f04e34ee54fa58
-
SHA1
eca407d0d55c3b0bde21464bc8dba45c458ff09e
-
SHA256
97558449f951f7a480da3cd9178db6f57698747417e3a5fb035cce5724a3a027
-
SHA512
cf305aedcd36845b3bd7b62da54238aafed133b3818ea8692ec234c25837518605a051fa3def6c48787ce50fe9acc36e8b7bfdde2e7cfe04efe91965484ab8bd
-
SSDEEP
6144:/kE0XcuaoVH5JanEZPaRJqNIUXp4TDLMI4Nu8:/gMC58Zi54TvMI+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1060e7a9335c6d1af9f04e34ee54fa58_JaffaCakes118
Files
-
1060e7a9335c6d1af9f04e34ee54fa58_JaffaCakes118.exe windows:5 windows x86 arch:x86
606d6176f1e7575f7e072cc7b4a14f52
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
Sleep
GetStartupInfoW
GetCommandLineW
GetModuleHandleA
GetProcAddress
user32
EnableWindow
EndDialog
EndPaint
FillRect
FindWindowA
GetCursorPos
GetDC
GetDlgItem
GetDlgItemTextA
GetKeyNameTextA
GetMenu
GetMessageA
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowTextA
InvalidateRect
IsIconic
IsWindowVisible
LoadBitmapA
EnableMenuItem
MapVirtualKeyA
MessageBoxA
MoveWindow
PeekMessageA
PostMessageA
PostQuitMessage
RedrawWindow
RegisterClassA
RegisterWindowMessageA
ReleaseCapture
SendDlgItemMessageA
SendMessageA
SetCapture
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TranslateMessage
UnregisterClassA
UpdateWindow
WinHelpA
DrawMenuBar
DispatchMessageA
DialogBoxParamA
DialogBoxIndirectParamA
DestroyWindow
DeleteMenu
DefWindowProcA
CreateWindowExA
CheckMenuItem
ChangeDisplaySettingsA
BeginPaint
LoadCursorW
LoadIconA
LoadIconW
LoadCursorA
gdi32
GetObjectA
CreateDIBitmap
GetStockObject
RealizePalette
ResizePalette
GetPaletteEntries
DeleteDC
CreateCompatibleDC
SetPaletteEntries
SelectPalette
advapi32
RegOpenKeyW
shell32
ShellAboutW
msvcrt
memcpy
Sections
.text Size: 313KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 548B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE