Static task
static1
Behavioral task
behavioral1
Sample
1002f67580c361588ae1b383fdd875d5_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1002f67580c361588ae1b383fdd875d5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1002f67580c361588ae1b383fdd875d5_JaffaCakes118
-
Size
168KB
-
MD5
1002f67580c361588ae1b383fdd875d5
-
SHA1
dd9930d3132473ac7bbf3a4ceb16f644c99f2fb7
-
SHA256
42b6a404af34e896970bafc678d7d13e77e1870673489850b2c1369db48c8dce
-
SHA512
5b44826c8d2c0460982a366888cd98db60f9ff67c3ea96a9bf8c666616c91ae4d3042564373d8a7a4a4fa1994f8963bde812f274ff05d5b7012929adde59eed1
-
SSDEEP
3072:O9wUiAwyUcuT4pQYUQ2em8JTuVxdkyFMUNcvYcsi7gMe1:HUir51YeemPxWyFMUUY/b1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1002f67580c361588ae1b383fdd875d5_JaffaCakes118
Files
-
1002f67580c361588ae1b383fdd875d5_JaffaCakes118.exe windows:5 windows x86 arch:x86
2f61f8b873422f5e303648d94e4a3aef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDesktopWindow
GetParent
TranslateMessage
CharNextA
GetDC
GetSystemMetrics
gdi32
CreatePen
SetStretchBltMode
RestoreDC
RectVisible
SelectObject
LineTo
SetTextColor
SaveDC
GetPixel
GetTextMetricsA
SetMapMode
GetClipBox
CreateCompatibleDC
SetTextAlign
SelectPalette
CreateSolidBrush
CreateFontIndirectA
DeleteObject
DeleteDC
GetDeviceCaps
PatBlt
GetStockObject
CreatePalette
GetObjectA
kernel32
GlobalFindAtomW
GetStartupInfoA
GetWindowsDirectoryA
lstrlenA
lstrcmpA
GetDriveTypeA
GetCurrentProcess
DeleteFileW
GetCurrentProcessId
GetModuleHandleA
GetOEMCP
IsDebuggerPresent
MulDiv
CopyFileA
QueryPerformanceCounter
GetACP
lstrcmpiA
GetProcessHeap
GlobalFindAtomA
SetCurrentDirectoryA
GetCurrentThread
GetVersion
DeleteFileA
RemoveDirectoryA
GetUserDefaultLangID
GetThreadLocale
GetTickCount
GetModuleHandleW
lstrcmpiW
lstrlenW
VirtualAlloc
VirtualFree
GetConsoleOutputCP
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Vep, Qei Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Skbntcpp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ