Static task
static1
Behavioral task
behavioral1
Sample
41ae44518f69a7c7fc697488bc830c05_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
41ae44518f69a7c7fc697488bc830c05_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
41ae44518f69a7c7fc697488bc830c05_JaffaCakes118
-
Size
425KB
-
MD5
41ae44518f69a7c7fc697488bc830c05
-
SHA1
7e94c49802b83d0cdc6bc6ab15a31602591807f0
-
SHA256
19b0527f4e2dad34c7096c59fb13cec7182d5865f3b2337137935ee6df02c415
-
SHA512
0f327776191ff58501a3df7371d4f60088fc222a7896e23557965b27b1a61676f544b34436ac94ad6309970af0ea7a0942c97da9ebfeeeeb53223004e2c9191b
-
SSDEEP
6144:HzpcDLVByPtp75tWyziZRS8k+0heD4pw73WTFE8Io673P8ALsUB3QBHPomIz+r2D:HNSXyP/fW7ZtkdjwE4iZHQ9yr2f7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41ae44518f69a7c7fc697488bc830c05_JaffaCakes118
Files
-
41ae44518f69a7c7fc697488bc830c05_JaffaCakes118.exe windows:4 windows x86 arch:x86
cc14e5283900fd5409ef86836f097cdc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
imm32
ImmGetCompositionStringA
ImmGetContext
msvcrt
_onexit
_exit
user32
CreateCaret
CharPrevW
DrawEdge
CopyRect
DispatchMessageW
ClientToScreen
CallNextHookEx
EnumWindows
GetActiveWindow
DefDlgProcA
CreateMenu
DrawMenuBar
GetDesktopWindow
GetDCEx
DestroyWindow
IsDlgButtonChecked
GetUserObjectSecurity
EnableMenuItem
GetDlgItemInt
GetClassInfoA
GetForegroundWindow
IsChild
SetParent
RegisterClipboardFormatA
MessageBoxA
GetWindowThreadProcessId
OpenClipboard
PtInRect
SetCaretPos
GetDlgItemTextW
LoadImageA
ToUnicode
SetClassLongA
GetWindowDC
wsprintfA
SystemParametersInfoW
SetKeyboardState
SetClipboardData
ShowCursor
SetDlgItemTextA
Sections
CODE Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE