?_GetCaretBlinkTime@@YGPAX_KDI@Z
Static task
static1
Behavioral task
behavioral1
Sample
53cfa825a2c9ca1933dc67d5354c2038_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
53cfa825a2c9ca1933dc67d5354c2038_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53cfa825a2c9ca1933dc67d5354c2038_JaffaCakes118
-
Size
148KB
-
MD5
53cfa825a2c9ca1933dc67d5354c2038
-
SHA1
8d3ddacf9cd498aee004aee3a46c9257f84738fc
-
SHA256
66354f012ec16d1bf6c114fc6fad0adae2d9e2fa5bb9e2a34ddb68e9e92d0d5d
-
SHA512
3c42a942f1f6cd1ea6fde2cf385b8d523ac40b67b5d4c5a39adc1dcc95d22f0d00596abf485d38c1adfa368261c89dab8637a1e70ee1827113c0ecbed5a42af9
-
SSDEEP
3072:xey7mdDhUle4Q0rnPY2HPqciOBwlWH3k5b:Yn5hUoCnPY2Hyhxgw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53cfa825a2c9ca1933dc67d5354c2038_JaffaCakes118
Files
-
53cfa825a2c9ca1933dc67d5354c2038_JaffaCakes118.exe windows:5 windows x86 arch:x86
e20bb4b67e207a536d73cb11bccbbf74
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCmpNIA
PathCanonicalizeA
StrRChrA
ord158
ChrCmpIW
PathFindFileNameW
shell32
SHCreateQueryCancelAutoPlayMoniker
kernel32
CreateMailslotA
GetCommConfig
CopyFileA
CreateFileMappingA
FileTimeToDosDateTime
OpenJobObjectA
GetDllDirectoryW
GlobalFlags
lstrcatW
GetHandleInformation
CreateTapePartition
TransmitCommChar
GetCommMask
OpenFileMappingW
lstrcpyA
CreateWaitableTimerW
OpenEventA
LoadLibraryExW
FlushFileBuffers
user32
SetScrollRange
EnumDisplaySettingsA
CallNextHookEx
AttachThreadInput
ChangeMenuA
DefDlgProcW
OpenDesktopA
GetDoubleClickTime
GetMonitorInfoA
SetPropW
GetKeyboardLayoutNameW
SetWindowContextHelpId
GetMenuStringA
CreatePopupMenu
IsDlgButtonChecked
SetCaretPos
SetWindowTextW
SendMessageCallbackA
LoadBitmapA
DestroyIcon
gdi32
ExtSelectClipRgn
Polyline
GetEnhMetaFilePaletteEntries
GetPath
CreateDiscardableBitmap
FixBrushOrgEx
SetTextJustification
GetTextAlign
GetPaletteEntries
CreateMetaFileA
GetCurrentObject
CreateEnhMetaFileW
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.icode Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m_data Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MData Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.n_data Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ