Static task
static1
Behavioral task
behavioral1
Sample
f32e8547f94f96d9bdae0559876529c4_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f32e8547f94f96d9bdae0559876529c4_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f32e8547f94f96d9bdae0559876529c4_JaffaCakes118
-
Size
74KB
-
MD5
f32e8547f94f96d9bdae0559876529c4
-
SHA1
6de7c36fb07f5772c872c9fc9d70c5f02e5df14e
-
SHA256
5633e8eb09f9bbf9f21941cd0ff27024d48ed907f855b61cb96cedd8e20e9674
-
SHA512
7b825ad8bde128368a9c5ba67bd4b21f933852a01492284ecdffcf6eb10fdcbaf5411a782fa00cc65a330062387436599eaa15c90569dcaa2d930aefee9c626e
-
SSDEEP
1536:my6DYZcXkAxogT414NpAWhqnp4FO01Db:mfsqq14L/ZFO0Nb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f32e8547f94f96d9bdae0559876529c4_JaffaCakes118
Files
-
f32e8547f94f96d9bdae0559876529c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
450736ea9f368b6e40003790718b02dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateSolidBrush
AddFontResourceW
AddFontResourceExW
ClearBrushAttributes
BeginPath
DeleteDC
SetTextColor
ClearBitmapAttributes
GetDCOrgEx
CloseFigure
CancelDC
GetClipBox
AddFontResourceTracking
ExtTextOutA
DeleteObject
GetBitmapBits
GetPixel
AddFontResourceExA
RestoreDC
CloseMetaFile
AbortPath
user32
GetMenu
LoadMenuA
CopyRect
CopyImage
GetWindowTextLengthA
DialogBoxParamA
DrawTextA
CreateIcon
AppendMenuW
IsMenu
DialogBoxParamW
BlockInput
GetCursor
GetDC
GetFocus
EndDialog
DrawTextW
comctl32
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Remove
ImageList_LoadImageA
ImageList_GetImageRect
ImageList_Destroy
ImageList_Create
ImageList_GetDragImage
ImageList_EndDrag
ImageList_DragLeave
ImageList_LoadImageW
ImageList_AddMasked
ImageList_DragShowNolock
ImageList_Merge
ImageList_LoadImage
ImageList_DragEnter
ImageList_AddIcon
ImageList_DrawIndirect
kernel32
ReadConsoleA
ReadFile
SetLastError
GetFileTime
ExitThread
DeleteFileA
FindAtomA
GetCommandLineA
GetComputerNameA
CopyFileA
Sleep
OpenFileMappingA
GlobalFree
CopyFileExA
FindFirstFileA
CreateDirectoryA
CreateThread
GetCPInfo
GetFileSize
GetConsoleMode
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 609B
IMAGE_SCN_MEM_READ