Static task
static1
Behavioral task
behavioral1
Sample
150d3dce115f6c5ca37f57972cd95c9e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
150d3dce115f6c5ca37f57972cd95c9e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
150d3dce115f6c5ca37f57972cd95c9e_JaffaCakes118
-
Size
212KB
-
MD5
150d3dce115f6c5ca37f57972cd95c9e
-
SHA1
cff745f0daa7d8c153621b2cfa0ee4ced09af781
-
SHA256
c6f4ac98e240fa073b9a5c3044d7e14aa85ed50f138a3b22a9d6f9e1e394183f
-
SHA512
fafe0abcb6ed4e31c268de17d691626a0a6857b98955dd69e0245e7fb301bc32f0a85dac597ed95c2877a212a55fc24f724a7d8daad76afc035c7acfc6ece44f
-
SSDEEP
3072:2tu2t2SUiIp4ExKrfQPAlzv0ZFrZZtC9pkTQmuCr3Sue5n5y:r2cLi8JYoPmzv4ZtYEBriu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 150d3dce115f6c5ca37f57972cd95c9e_JaffaCakes118
Files
-
150d3dce115f6c5ca37f57972cd95c9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
2686a883c094d93b745465c7a7b1b3fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
IsBadReadPtr
GetVersionExA
lstrlenW
GetModuleHandleA
GetLastError
VirtualAlloc
lstrlenA
GetProcAddress
LocalAlloc
LoadLibraryExA
GetCommandLineA
user32
CharToOemA
GetMenuState
SetClipboardData
GetWindowTextA
DrawFrameControl
CreateIcon
GetMenuItemInfoA
EnumChildWindows
IsZoomed
GetWindowRect
CharLowerA
TrackPopupMenu
GetSubMenu
CheckMenuItem
DrawMenuBar
SetCursor
SetPropA
DrawIconEx
GetActiveWindow
InsertMenuItemA
SetParent
FillRect
GetKeyboardLayoutNameA
LoadCursorA
MapVirtualKeyA
GetForegroundWindow
DestroyCursor
GetKeyboardLayoutList
RegisterClipboardFormatA
GetMenuItemCount
MapWindowPoints
GetClassInfoA
SetScrollInfo
ShowWindow
GetFocus
SetScrollPos
IsWindowVisible
DestroyIcon
InflateRect
IsRectEmpty
GetDCEx
GetCapture
GetSysColorBrush
ShowOwnedPopups
ReleaseCapture
CharLowerBuffA
MoveWindow
SetWindowsHookExA
SetWindowLongW
MsgWaitForMultipleObjects
GetDlgItem
DispatchMessageW
GetWindow
CreateMenu
GetWindowPlacement
ReleaseDC
ScreenToClient
CloseClipboard
GetKeyState
GetScrollRange
DrawTextA
GetLastActivePopup
DrawEdge
LoadStringA
OemToCharA
GetParent
IsWindow
GetSysColor
GetCursor
CreatePopupMenu
RemovePropA
GetMenuStringA
IsChild
DeleteMenu
DispatchMessageA
EndPaint
EmptyClipboard
GetClassLongA
SetWindowPlacement
PostMessageA
DrawAnimatedRects
GetClipboardData
MessageBoxA
comdlg32
GetSaveFileNameA
ChooseColorA
gdi32
CreatePalette
CreateBitmap
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES1 Size: 512B - Virtual size: 127B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 512B - Virtual size: 186B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES2 Size: 2KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 1024B - Virtual size: 642B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ