Static task
static1
Behavioral task
behavioral1
Sample
0f8600ebfe76b353c9107713efe2d4f2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f8600ebfe76b353c9107713efe2d4f2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0f8600ebfe76b353c9107713efe2d4f2_JaffaCakes118
-
Size
113KB
-
MD5
0f8600ebfe76b353c9107713efe2d4f2
-
SHA1
e77c84db532cb3bd852b7c0f274ddf47795c4cb3
-
SHA256
122d5de83b6d23a3ac61f13bc9342db880fc47beffbe77b6e487fd98dc9548e2
-
SHA512
1838a36c62d6f4cff760f5e6ba1faf8293dfabf2a5834e55a499e4c7c1ccf6f009076b10b85e1396f0f543aeec912bcc3dae973676ef55909e11c948d89d6086
-
SSDEEP
3072:K3uiIQy57SlYCHIx8sHAlzYx7NgcxkXmc:K+9SlBIx/AlzCKB2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f8600ebfe76b353c9107713efe2d4f2_JaffaCakes118
Files
-
0f8600ebfe76b353c9107713efe2d4f2_JaffaCakes118.exe windows:5 windows x86 arch:x86
33d292556965eb74aa026de4f95d49ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFindAtomA
SetCurrentDirectoryA
IsDebuggerPresent
GetWindowsDirectoryA
GetStartupInfoA
GetDriveTypeA
GetCurrentThreadId
GetThreadLocale
GetTickCount
GetProcessHeap
GetCommandLineW
GetModuleHandleA
lstrlenA
GetModuleHandleW
lstrcmpiW
QueryPerformanceCounter
GetVersion
DeleteFileW
DeleteFileA
GetCurrentProcess
GetCurrentProcessId
lstrcmpiA
GetCommandLineA
GetACP
lstrcmpA
GetUserDefaultLangID
GetConsoleOutputCP
GlobalFindAtomW
MulDiv
GetOEMCP
RemoveDirectoryW
lstrlenW
RemoveDirectoryA
CopyFileA
GetCurrentThread
VirtualAlloc
VirtualFree
gdi32
RestoreDC
GetDeviceCaps
CreatePalette
DeleteObject
DeleteDC
SaveDC
CreateSolidBrush
LineTo
RectVisible
CreatePen
SetStretchBltMode
GetStockObject
SetTextColor
SelectObject
PatBlt
GetObjectA
GetPixel
GetTextMetricsA
SelectPalette
SetTextAlign
CreateCompatibleDC
SetMapMode
SetPixel
CreateFontIndirectA
GetClipBox
user32
GetDesktopWindow
GetSystemMetrics
TranslateMessage
GetParent
CharNextA
glu32
gluQuadricCallback
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ