Static task
static1
Behavioral task
behavioral1
Sample
157406d953acfbb6ee2ae2b75ac4ac28_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
157406d953acfbb6ee2ae2b75ac4ac28_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
157406d953acfbb6ee2ae2b75ac4ac28_JaffaCakes118
-
Size
107KB
-
MD5
157406d953acfbb6ee2ae2b75ac4ac28
-
SHA1
49d8b294a1291eb9938ead2d99b92a31fc22135c
-
SHA256
0495bdf3496daece7a59a2d21ad653af0305c453850e1b5fb8d425a12e16cd0b
-
SHA512
46a497395a6d17f9287be1360fa3abb280155951494ea9d6566595c9d6fc1146b6f37c5bad101bb96adf88a225600d8f313b94615d9d573b6b79928df8d9a0db
-
SSDEEP
1536:enWbptqzxn0ViZYkTl75KvV6qVIsNTHklELA4tMW3i6Eg+9/ZX6nn:enWbpwz+V4r7566eHkeLA4tMd9/ZX6n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 157406d953acfbb6ee2ae2b75ac4ac28_JaffaCakes118
Files
-
157406d953acfbb6ee2ae2b75ac4ac28_JaffaCakes118.exe windows:4 windows x86 arch:x86
e5b095d24eb57767faea951bf2767418
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RectVisible
GetClipBox
LineTo
CreateCompatibleDC
SetMapMode
GetTextMetricsA
CreateSolidBrush
SelectObject
GetPixel
GetObjectA
GetStockObject
CreatePalette
SelectPalette
SaveDC
DeleteObject
CreateFontIndirectA
GetDeviceCaps
SetTextColor
DeleteDC
SetStretchBltMode
RestoreDC
user32
GetDC
CharNextA
GetSystemMetrics
TranslateMessage
GetDesktopWindow
GetParent
kernel32
GetWindowsDirectoryA
QueryPerformanceCounter
DeleteFileA
GlobalFindAtomA
RemoveDirectoryA
GetModuleHandleA
GetSystemTime
lstrcmpiA
lstrlenA
lstrcmpiW
VirtualAlloc
lstrcmpA
VirtualFree
RemoveDirectoryW
FindClose
GetCommandLineA
glu32
gluNurbsCallback
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pnntuah Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE