Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_e2bc5dc6a57ba383524307fdfb2c3465.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_e2bc5dc6a57ba383524307fdfb2c3465.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_e2bc5dc6a57ba383524307fdfb2c3465
-
Size
84KB
-
MD5
e2bc5dc6a57ba383524307fdfb2c3465
-
SHA1
4dd298e86562c27b372980da486b49708fd6b5ff
-
SHA256
165180563812345582a188f2f9a4e768e39b969e3c281c433ae2157f4906a7d9
-
SHA512
3d12b8b9f3a55f3418ce7fad54861011ac6484a1ab7f1a863d3c39f80f7f4b8d02ecae27065120115663ea3175a8f0ecbc9700e23b4f16fbc9bbd28e29534b8d
-
SSDEEP
1536:hdv5GtSe5F9sLsa6dgHPACHBxL1uslln5IUmDjoXc1g:5GQe5sX6dehxxuslln5Ih1g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_e2bc5dc6a57ba383524307fdfb2c3465
Files
-
JaffaCakes118_e2bc5dc6a57ba383524307fdfb2c3465.exe windows:4 windows x86 arch:x86
177915a84030aab101182f3f72f3b2d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_AddMasked
ImageList_Create
InitCommonControlsEx
ImageList_Destroy
kernel32
GetStartupInfoA
GetModuleHandleA
lstrcpynA
lstrlenA
CloseHandle
LoadLibraryA
GlobalUnlock
GlobalLock
GlobalAlloc
ReadFile
SetFilePointer
CreateFileA
GetTickCount
WriteFile
lstrcmpA
SetThreadPriority
GetThreadPriority
GetCurrentThread
FreeLibrary
user32
SetFocus
CreateWindowExA
GetSystemMetrics
RegisterClassExA
LoadCursorA
LoadIconA
TrackPopupMenu
GetSubMenu
GetCursorPos
PostQuitMessage
SetWindowTextA
CreateDialogParamA
MessageBoxA
OpenClipboard
GetWindowTextA
SetClipboardData
CloseClipboard
SetForegroundWindow
PostMessageA
SetWindowLongA
LoadMenuA
SendDlgItemMessageA
GetClientRect
GetMenu
AdjustWindowRect
GetWindowRect
DestroyMenu
DestroyWindow
IsDialogMessageA
DefWindowProcA
GetDlgItemTextA
EmptyClipboard
ScreenToClient
MoveWindow
EnableWindow
wsprintfA
SetDlgItemTextA
LoadBitmapA
LoadImageA
GetDC
ReleaseDC
BeginPaint
EndPaint
GetDlgItemInt
SetDlgItemInt
ShowWindow
InvalidateRect
SetWindowPos
UpdateWindow
GetWindowLongA
CallWindowProcA
HideCaret
GetDlgItem
SendMessageA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
CopyRect
gdi32
DeleteDC
StretchBlt
RealizePalette
SelectPalette
SelectObject
CreateCompatibleDC
CreateHalftonePalette
CreatePalette
GetDIBColorTable
GetObjectA
CreateFontIndirectA
CreateSolidBrush
SetBkColor
SetTextColor
GetStockObject
DeleteObject
comdlg32
GetOpenFileNameA
GetSaveFileNameA
shell32
DragAcceptFiles
DragQueryFileA
msvcrt
__CxxFrameHandler
??2@YAPAXI@Z
_strlwr
sprintf
calloc
??3@YAXPAX@Z
malloc
free
strchr
realloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strstr
_stricmp
_initterm
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ