Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_37ec94000992b758b0f93205e78011dc.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_37ec94000992b758b0f93205e78011dc.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_37ec94000992b758b0f93205e78011dc
-
Size
175KB
-
MD5
37ec94000992b758b0f93205e78011dc
-
SHA1
097cac9b22caa1a1113d42b4d4a03a991179fef0
-
SHA256
a7b6266473caeb3ee6d14544e377f7b64d4f4a73af321007e364cbbaa236f3e3
-
SHA512
f449feee364ee883fca03fb9554d5ab89e8a66eb3110e0e5be3aeb3a93e570169433bf51b50cffc8c36f7807de6b1fdfec0eb8685c233b0c788953b3913b6074
-
SSDEEP
3072:ajeJvTHjs3ypJ7ib5tf5wExuijs1n4oCku7CgveTXs1E7/cjo:keJvTY3EiVEaXjs1n4oCkumgGAjo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_37ec94000992b758b0f93205e78011dc
Files
-
JaffaCakes118_37ec94000992b758b0f93205e78011dc.exe windows:4 windows x86 arch:x86
2e96bf47e33b05e5e509173a0211b4e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
InvalidateRect
OffsetRect
GetWindowLongA
ScreenToClient
GetClassLongA
SetFocus
LoadCursorA
ShowWindow
SetWindowTextA
GetClientRect
DispatchMessageA
DestroyWindow
PeekMessageA
GetFocus
EndPaint
MessageBoxA
CreateWindowExA
wvsprintfA
SubtractRect
TranslateMessage
SetCursor
SetWindowLongA
BeginPaint
IsWindow
ReleaseCapture
DefWindowProcA
MoveWindow
LoadIconA
GetWindowRect
RegisterClassA
SendMessageA
GetMessageA
CallWindowProcA
UpdateWindow
GetKeyState
SetCapture
avicap32
capCreateCaptureWindowA
capGetDriverDescriptionA
kernel32
QueryDosDeviceW
LocalAlloc
ProcessIdToSessionId
DisableThreadLibraryCalls
GetProcessId
Sleep
GetFileSize
ReadFile
CreateFileMappingA
SetFilePointer
CloseHandle
LocalFree
UnmapViewOfFile
EnumResourceTypesA
CreateFileA
WriteFile
ExitProcess
lstrlenA
MapViewOfFile
GlobalAlloc
GlobalSize
GlobalFree
msvfw32
ICDecompress
ICSendMessage
ICOpen
ICClose
comctl32
CreateToolbarEx
avifil32
AVIFileOpenA
AVIStreamRelease
AVIFileInit
AVISaveOptions
AVIStreamGetFrameOpen
AVIFileRelease
AVIStreamGetFrameClose
AVIStreamInfoA
AVIFileCreateStreamA
AVIStreamSetFormat
AVIStreamGetFrame
AVIStreamWrite
AVIFileGetStream
AVIMakeCompressedStream
gdi32
BitBlt
SetStretchBltMode
CreateRectRgn
FillRgn
GetCurrentObject
StretchDIBits
GetStockObject
SetDIBColorTable
SetDIBitsToDevice
CreateCompatibleDC
GetObjectA
CreateDIBSection
CombineRgn
DeleteDC
DeleteObject
SelectObject
StretchBlt
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ