Static task
static1
Behavioral task
behavioral1
Sample
1689a2bf0e25f68456603ebfa3abb2a7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1689a2bf0e25f68456603ebfa3abb2a7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1689a2bf0e25f68456603ebfa3abb2a7_JaffaCakes118
-
Size
374KB
-
MD5
1689a2bf0e25f68456603ebfa3abb2a7
-
SHA1
7750e6c5ab1da88a34744a3b843589d429ad8ed3
-
SHA256
02b97bf07fd8a2f1ad91fdce12a9f9be4d136f30727c7aa6f56861e1efb64bee
-
SHA512
7913201b52edd9aa27aebb94111148c388fd00a682d2658125938f2b2ebd362c1d9718a729f8664097d60ecf89ee591eebded10524baabea0738ac8027cf56b6
-
SSDEEP
6144:0E7PkhJy6RZTUJDJ+fiAunbmzQnFiCnC56vUw27WZYfjLILebw6Z9OimK:5P8xVUJDclkFiGugPZ6k5Gl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1689a2bf0e25f68456603ebfa3abb2a7_JaffaCakes118
Files
-
1689a2bf0e25f68456603ebfa3abb2a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
636581434f4487cca5cb870a980f8583
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SafeArrayGetUBound
SafeArrayCreate
VariantCopyInd
SafeArrayGetElement
SysFreeString
GetErrorInfo
SysStringLen
user32
GetClassInfoA
SetCapture
SystemParametersInfoA
DestroyIcon
GetCursor
wsprintfA
SetWindowLongW
GetMenu
CreateWindowExA
CallNextHookEx
CreatePopupMenu
EnableScrollBar
GetWindowRect
FrameRect
TrackPopupMenu
SetForegroundWindow
ActivateKeyboardLayout
LoadKeyboardLayoutA
MessageBeep
EnableWindow
SetPropA
GetKeyboardType
SetScrollRange
InsertMenuItemA
ClientToScreen
DrawMenuBar
GetSysColor
InflateRect
SetWindowLongA
ScreenToClient
ShowWindow
IsWindowVisible
LoadBitmapA
IsChild
IntersectRect
GetTopWindow
PostQuitMessage
InsertMenuA
GetPropA
RedrawWindow
ReleaseDC
DrawIcon
KillTimer
GetKeyState
EnumWindows
WaitMessage
LoadCursorA
SetScrollPos
ChildWindowFromPoint
CharNextW
CharToOemA
IsWindowUnicode
TranslateMessage
GetIconInfo
GetParent
GetKeyNameTextA
DefFrameProcA
GetDlgItem
GetMenuState
OffsetRect
GetClipboardData
SetWindowTextA
RegisterClipboardFormatA
GetClientRect
PeekMessageW
SetFocus
GetFocus
GetMessagePos
DestroyWindow
PeekMessageA
GetDCEx
RemovePropA
EnableMenuItem
DrawAnimatedRects
CharNextA
DefMDIChildProcA
DispatchMessageA
SendMessageA
GetScrollPos
IsDialogMessageA
GetWindowDC
GetActiveWindow
GetSystemMenu
comctl32
ImageList_Create
ImageList_Destroy
ImageList_Remove
ImageList_DragShowNolock
ImageList_Read
ImageList_Draw
ImageList_Add
ImageList_Write
kernel32
VirtualAllocEx
ExitProcess
GetProcAddress
GetVersionExA
IsBadHugeReadPtr
ExitThread
LoadLibraryExA
GlobalAlloc
LoadLibraryA
LocalAlloc
GetModuleHandleA
VirtualAlloc
GetCommandLineA
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 303KB - Virtual size: 302KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES5 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES1 Size: 512B - Virtual size: 458B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES7 Size: 1024B - Virtual size: 785B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES8 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ