Static task
static1
Behavioral task
behavioral1
Sample
426621553270d7b87f5fda1e27c96063_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
426621553270d7b87f5fda1e27c96063_JaffaCakes118
-
Size
422KB
-
MD5
426621553270d7b87f5fda1e27c96063
-
SHA1
5fb80befe9f475d1036b5d2b895c69fe074595fa
-
SHA256
801423f50323ab2e02259ba7f67b09000d0960a2598ac24fc5cbebae1d636ba9
-
SHA512
ed42197442e806bde003d44d9cf0566d6a75fb196e894360b552d61af75a9f671716ba42bc22595c3d11bac08aeb852349d502c8662a42ff9a43fd82920d6935
-
SSDEEP
12288:a4UlWvoZHZ2wtPucqPH5M+5rQusALN8iXci:nOCH5Mur2is
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426621553270d7b87f5fda1e27c96063_JaffaCakes118
Files
-
426621553270d7b87f5fda1e27c96063_JaffaCakes118.exe windows:4 windows x86 arch:x86
7985a2eb7c55a867c884d5c1ac3c35a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
WindowFromPoint
SendDlgItemMessageA
GetClientRect
SetDlgItemTextA
GetDlgItemInt
GetWindowRect
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowThreadProcessId
DialogBoxParamA
SetSysColors
ole32
CoInstall
CoRegisterPSClsid
OleCreateLinkToFileEx
CLSIDFromString
CoGetStandardMarshal
OleCreateLinkFromDataEx
CoGetPSClsid
StgSetTimes
ReleaseStgMedium
CoMarshalHresult
DoDragDrop
StgCreatePropStg
StgIsStorageILockBytes
OleDraw
OleSetMenuDescriptor
GetRunningObjectTable
oledlg
ord6
ord9
ord1
ord12
ord11
ord4
ord10
ord7
ord3
ord2
ord5
oleaut32
LHashValOfNameSysA
comctl32
CreateToolbarEx
InitCommonControlsEx
ord2
PropertySheetW
ord4
ord8
ord3
CreateStatusWindowW
shlwapi
StrChrA
StrRStrIW
StrChrW
StrRChrIW
kernel32
DeleteCriticalSection
OpenSemaphoreA
ResetEvent
GetProcessHeap
HeapCreate
HeapSize
IsValidLocale
GetCPInfoExA
GetUserDefaultLangID
GlobalFree
HeapAlloc
OpenMutexA
GetProcAddress
VirtualAlloc
GetStartupInfoA
GetModuleHandleA
GlobalLock
msvcrt
__getmainargs
_acmdln
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_exit
_XcptFilter
atol
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 294KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ