Static task
static1
Behavioral task
behavioral1
Sample
e86f2904c49ed24e43ce16773c47842e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e86f2904c49ed24e43ce16773c47842e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e86f2904c49ed24e43ce16773c47842e_JaffaCakes118
-
Size
101KB
-
MD5
e86f2904c49ed24e43ce16773c47842e
-
SHA1
9c8d1e499f248ddedb857a44fd66d1a25354a543
-
SHA256
2771d9a3d72afa8873a75a886337967dfd7fd96dc2bc06fba4c8ade3e4025276
-
SHA512
2875eda3e7d4fbda133f5e55121963a816d9f63881d25b8613c34d1ef5f3f2d0428f50b06c9575ff26449c7dc34bbd4b6ca3691141cbe599873a8acfde1c02a9
-
SSDEEP
3072:48gyxF6/jom+7n/ecPJ7ChPeRZCZKYOHm:TsjArZPJ7CyV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e86f2904c49ed24e43ce16773c47842e_JaffaCakes118
Files
-
e86f2904c49ed24e43ce16773c47842e_JaffaCakes118.exe windows:4 windows x86 arch:x86
820d936d1283aba288c6ca055b5b903e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetClipBox
RestoreDC
GetObjectA
SetTextColor
CreateFontIndirectA
GetStockObject
DeleteObject
GetTextMetricsA
DeleteDC
SaveDC
LineTo
CreatePalette
RectVisible
CreateSolidBrush
GetPixel
SetTextAlign
SelectObject
SetStretchBltMode
GetDeviceCaps
kernel32
DeleteFileA
RemoveDirectoryW
FindClose
RemoveDirectoryA
lstrlenA
GlobalFindAtomA
lstrcmpiW
lstrcmpiA
lstrcmpA
GetSystemTime
QueryPerformanceCounter
GetCommandLineA
lstrlenW
CopyFileA
GetWindowsDirectoryA
GetModuleHandleA
VirtualAlloc
VirtualFree
user32
GetDesktopWindow
GetParent
CharNextA
GetSystemMetrics
TranslateMessage
GetDC
glu32
gluNurbsCallback
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE