Static task
static1
Behavioral task
behavioral1
Sample
89c8b2e4ad09ad1acc969d9f33efd4af_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
89c8b2e4ad09ad1acc969d9f33efd4af_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
89c8b2e4ad09ad1acc969d9f33efd4af_JaffaCakes118
-
Size
58KB
-
MD5
89c8b2e4ad09ad1acc969d9f33efd4af
-
SHA1
77d69775f04458082b74cb5ad7662adf210d6d60
-
SHA256
2d092b29b601a0dbf01bbddbbe146a4be4ce0fb6650a3bb0326ddfd76b19a81f
-
SHA512
fad71c9c2393a889645818a28c61ff410f3774a7dc4f31980a1f12e82f828ef28c561c5e12143323177084e39154d38176d2a6682d42e53c2e5f8795d610dbc6
-
SSDEEP
1536:l7wyh3TGVzYT4DJkzhbNhaf4N9ajwzcr+:l0yh3ipf1ymAYUcy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89c8b2e4ad09ad1acc969d9f33efd4af_JaffaCakes118
Files
-
89c8b2e4ad09ad1acc969d9f33efd4af_JaffaCakes118.exe windows:4 windows x86 arch:x86
e598de10a952ff62de59de6156d91e2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
mscms
GetColorDirectoryA
ddraw
DirectDrawCreateEx
gdi32
GetDeviceGammaRamp
user32
GetDC
advapi32
CopySid
ole32
CoInitialize
oleaut32
SysStringLen
Sections
.MPRESS1 Size: 45KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE