Static task
static1
Behavioral task
behavioral1
Sample
0b0761c2c818e2cdb70bb77fab2b0c2b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b0761c2c818e2cdb70bb77fab2b0c2b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b0761c2c818e2cdb70bb77fab2b0c2b_JaffaCakes118
-
Size
113KB
-
MD5
0b0761c2c818e2cdb70bb77fab2b0c2b
-
SHA1
25bd4bf9a020e221d5a7ab3f80f22d8fe96a417f
-
SHA256
aafeaa338c87d01ddcc2ac1cd03571757b791eae2513d6781494ccb1c567d7c8
-
SHA512
7da0bdf6a1708a1f8561fb166368a5dd83d904607f2b44a5104307eb1cadcf24b87a2b1ffdaa3a7159f9cec67a95d993796826a797aedba4fdafce1a55ded4e9
-
SSDEEP
1536:9nrsQAYwI0eS5TcpvnRtY2s3ZFwXXzixTMG3i6PgAXAnWo28:SA0eS5Twtso+xgkAnWop
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b0761c2c818e2cdb70bb77fab2b0c2b_JaffaCakes118
Files
-
0b0761c2c818e2cdb70bb77fab2b0c2b_JaffaCakes118.exe windows:5 windows x86 arch:x86
95e92d9e3589eb6b6f83e41e52ba0ebf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSystemMetrics
TranslateMessage
GetDC
CharNextA
GetParent
GetDesktopWindow
gdi32
SetTextAlign
SelectObject
CreateFontIndirectA
GetStockObject
GetPixel
CreateSolidBrush
SetStretchBltMode
GetObjectA
DeleteObject
SetTextColor
GetDeviceCaps
SelectPalette
GetTextMetricsA
GetClipBox
CreateCompatibleDC
RestoreDC
SaveDC
CreatePalette
LineTo
SetMapMode
RectVisible
kernel32
GlobalFindAtomA
RemoveDirectoryA
GetModuleHandleA
GetCommandLineA
DeleteFileA
lstrlenA
CopyFileA
GetSystemTime
QueryPerformanceCounter
lstrcmpiW
lstrlenW
lstrcmpA
GetWindowsDirectoryA
RemoveDirectoryW
FindClose
VirtualAlloc
lstrcmpiA
VirtualFree
glu32
gluNurbsCallback
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ