Static task
static1
Behavioral task
behavioral1
Sample
172f23bd851388eebfdb259807a2e8b5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
172f23bd851388eebfdb259807a2e8b5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
172f23bd851388eebfdb259807a2e8b5_JaffaCakes118
-
Size
110KB
-
MD5
172f23bd851388eebfdb259807a2e8b5
-
SHA1
dc3ceb9f1b79b7371c2a2289837116e1f0ecf353
-
SHA256
353c2a155ec2e286222fa46f4141a043ba0e2c1a528aa8ef522e6ad3bbc85fc3
-
SHA512
8bb4ba1bbeaac4fe1a90c4cb14117e4a100c881f59a6fc680cbfe4c9cbddbb0670eab74e0d6669f454a84303f1d2391e3b5b3dfb56f73fd284f64c98e8990fdf
-
SSDEEP
1536:rH7uBijQV+i2A+9Si286CdbU8cDUUTqXNqQQL4g929Jxq396EcUq7e7vo:o2niP+92OQkUTms4g9Coq7e7vo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 172f23bd851388eebfdb259807a2e8b5_JaffaCakes118
Files
-
172f23bd851388eebfdb259807a2e8b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
5d3ecf2101bda29734372ebb525e9e4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSystemMetrics
CharNextA
TranslateMessage
GetDesktopWindow
GetParent
GetDC
kernel32
GetWindowsDirectoryA
GetCommandLineA
lstrcmpiW
RemoveDirectoryA
lstrlenA
lstrcmpA
CopyFileA
RemoveDirectoryW
GetModuleHandleA
FindClose
lstrcmpiA
DeleteFileA
lstrlenW
GetSystemTime
QueryPerformanceCounter
GlobalFindAtomA
VirtualAlloc
VirtualFree
gdi32
GetObjectA
GetTextMetricsA
CreateFontIndirectA
RestoreDC
SaveDC
GetClipBox
CreateCompatibleDC
SelectPalette
DeleteDC
CreatePalette
SetTextColor
SetStretchBltMode
GetPixel
GetDeviceCaps
GetStockObject
SetMapMode
LineTo
DeleteObject
CreateSolidBrush
SelectObject
glu32
gluNurbsCallback
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE