Static task
static1
Behavioral task
behavioral1
Sample
662eb48041d9000810f5e0f036d5b61b_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
662eb48041d9000810f5e0f036d5b61b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
662eb48041d9000810f5e0f036d5b61b_JaffaCakes118
-
Size
3.3MB
-
MD5
662eb48041d9000810f5e0f036d5b61b
-
SHA1
7774dd169d4f50dc82463433905b3218fd033b2d
-
SHA256
6f4b7c331dac509f2f4321388b40d78d9b949af42d0e1743fe47077f5d0eddcb
-
SHA512
d3511700a1443af6d956b06187b9bf842e6ea579c9ff01ca6591844b35b4503ba47c6e1888990f3794b9f02dd01e2aeb5f5f737904a05c48c50b357a3cf38388
-
SSDEEP
24576:SUUqiAN52b+UlH9xGD1dMjK//jRCA0XwvgXYpoOR6/BV0lzYG7NIFjIygjjFfv0C:RiC52bpAFKmoOR6/OHNI6fcrpg4Uv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 662eb48041d9000810f5e0f036d5b61b_JaffaCakes118
Files
-
662eb48041d9000810f5e0f036d5b61b_JaffaCakes118.exe windows:5 windows x86 arch:x86
bcc25f3b9e2fda99c7827bfdc6978225
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
wglUseFontBitmapsW
oleaut32
LoadTypeLi
VarBstrFromBool
SafeArrayCreate
SafeArrayGetLBound
VariantChangeTypeEx
CreateErrorInfo
VarDateFromStr
user32
GetDC
FillRect
DdeFreeDataHandle
DestroyMenu
kernel32
GetOEMCP
GetACP
VirtualAllocEx
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
SetFileShortNameW
GetSystemTime
FormatMessageW
GetModuleHandleW
GetFileAttributesW
GetModuleHandleA
GetStartupInfoW
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
gdi32
GdiFlush
AbortDoc
GdiAlphaBlend
GetFontLanguageInfo
GetMetaFileBitsEx
GetBitmapBits
DeleteDC
CreateScalableFontResourceW
CreateCompatibleBitmap
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.08mie Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.6ce7ny Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ