Static task
static1
Behavioral task
behavioral1
Sample
145ee7816d7e269fac2a0cb5ee46a2ea_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
145ee7816d7e269fac2a0cb5ee46a2ea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
145ee7816d7e269fac2a0cb5ee46a2ea_JaffaCakes118
-
Size
572KB
-
MD5
145ee7816d7e269fac2a0cb5ee46a2ea
-
SHA1
712ad50757b163e8da4d63ebd786087d76d5b108
-
SHA256
b06f530d72b9c460a563ad6dc4e719ff17b36fe3e4ea57d2b96c98b966dfbff6
-
SHA512
5f5c5d7531568a21300e172bd78d677b98ed7cee6dd5acc05a27deaa95b9ee82b8714e3e0c3d127888886ca8da747169c57ccb729437af8f83ca34283d06671a
-
SSDEEP
3072:ldeoPi8Vg/Yu0Ugq+ox+liWwJEixDiaHGliWwJEixDiaHuliWwJEixDiaHfliWwo:yn9Xbf48m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 145ee7816d7e269fac2a0cb5ee46a2ea_JaffaCakes118
Files
-
145ee7816d7e269fac2a0cb5ee46a2ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
849a4742f2edbd2ecc3b8413df8349f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
GetStringTypeW
GetStringTypeA
SetFilePointer
GetLastError
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
Sleep
GetProcAddress
RaiseException
SetStdHandle
CloseHandle
HeapFree
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
user32
GetDesktopWindow
InvalidateRect
DialogBoxParamA
LoadCursorA
CreateWindowExA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
LoadIconA
ReleaseDC
GetDC
GetClassNameA
EnumChildWindows
GetWindowTextA
ShowWindow
EnumWindows
GetWindowRect
MessageBeep
IsWindowVisible
SetRect
InvalidateRgn
KillTimer
OffsetRect
LoadBitmapA
GetKeyState
CheckRadioButton
SetWindowTextA
GetClientRect
DrawTextA
LoadMenuA
GetSubMenu
GetCursorPos
SetActiveWindow
GetSystemMetrics
TrackPopupMenu
PostMessageA
SetWindowPos
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
WinHelpA
SendMessageA
EndDialog
IsDlgButtonChecked
CheckDlgButton
GetDlgItem
CreateDialogParamA
SetClassLongA
MessageBoxA
UpdateWindow
SetTimer
gdi32
SaveDC
CreateRectRgn
DeleteDC
SetRectRgn
SetBkMode
PtInRegion
RectInRegion
CreateCompatibleBitmap
GetMapMode
SetMapMode
BitBlt
CreateCompatibleDC
GetObjectA
GetRgnBox
OffsetRgn
RestoreDC
CombineRgn
InvertRgn
GetStockObject
SetGraphicsMode
ModifyWorldTransform
SetViewportOrgEx
SetWindowOrgEx
GetDeviceCaps
DPtoLP
CreateFontIndirectA
SelectObject
GetTextMetricsA
DeleteObject
advapi32
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
shell32
Shell_NotifyIconA
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 500KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE