Static task
static1
Behavioral task
behavioral1
Sample
0f3c58543c7f806747b9c373f105c70b_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f3c58543c7f806747b9c373f105c70b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f3c58543c7f806747b9c373f105c70b_JaffaCakes118
-
Size
113KB
-
MD5
0f3c58543c7f806747b9c373f105c70b
-
SHA1
6668c58803882bb7aab36007d009cd369fb8a906
-
SHA256
489cb09fbac37178820f83da8bcb9f6f5aa6738583e95fbcabae89a2149cfd40
-
SHA512
823b9c7b448e4ee15aabafc3f5cc47e8ccbfc5c9a720f63c040e4ab01da207ced78723dd8703d79eb3542114c118b02b21f336f6bde51757119ebff6f4698701
-
SSDEEP
3072:f3Dxh13I8hxlXV+cZQ5pPWC0kPN3WQMu:bxnJhxlkcZQrWC00+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f3c58543c7f806747b9c373f105c70b_JaffaCakes118
Files
-
0f3c58543c7f806747b9c373f105c70b_JaffaCakes118.exe windows:5 windows x86 arch:x86
bcce2fdbef4f354fa1117e9ee4754df3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSystemMetrics
TranslateMessage
GetParent
GetDesktopWindow
CharNextA
kernel32
GetCommandLineA
GetDriveTypeA
GetModuleHandleA
lstrcmpiA
lstrlenW
GetCurrentProcess
GetCurrentThreadId
QueryPerformanceCounter
MulDiv
GetACP
lstrcmpA
GetProcessHeap
GetThreadLocale
GetCurrentProcessId
GetWindowsDirectoryA
GlobalFindAtomW
DeleteFileA
GetCurrentThread
SetCurrentDirectoryA
GetTickCount
CopyFileA
GetUserDefaultLangID
GetStartupInfoA
GetConsoleOutputCP
GlobalFindAtomA
GetVersion
GetModuleHandleW
VirtualAlloc
VirtualFree
lstrcmpiW
RemoveDirectoryW
RemoveDirectoryA
IsDebuggerPresent
lstrlenA
GetOEMCP
GetCommandLineW
DeleteFileW
gdi32
SelectObject
CreateCompatibleDC
PatBlt
LineTo
RestoreDC
GetStockObject
CreateSolidBrush
DeleteDC
GetTextMetricsA
CreateFontIndirectA
SetMapMode
SetStretchBltMode
GetPixel
RectVisible
SelectPalette
SetTextAlign
SaveDC
GetObjectA
CreatePalette
GetDeviceCaps
SetPixel
CreatePen
DeleteObject
GetClipBox
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ