Static task
static1
Behavioral task
behavioral1
Sample
1980fb9aae158978c6cb76ad1e7a3671_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1980fb9aae158978c6cb76ad1e7a3671_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1980fb9aae158978c6cb76ad1e7a3671_JaffaCakes118
-
Size
168KB
-
MD5
1980fb9aae158978c6cb76ad1e7a3671
-
SHA1
8a8245a6e00f900a63ab79e94220db5f9413564b
-
SHA256
56dd9b99dc08675a2529ea735e67b3a7c407e74b0008b85c39174cddd55dae41
-
SHA512
d57c23334d89de54f098dee766d149a33ec99373eed0d163bffd78f21f73be3d5aa0dc597f790cd85f51dda0b54ca949623609488602bc43b5f3eb75e5719ef1
-
SSDEEP
3072:DeFWDTvchxqfxBurweshjztogEulMJmCaucxC:kGfoshj1Eud
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1980fb9aae158978c6cb76ad1e7a3671_JaffaCakes118
Files
-
1980fb9aae158978c6cb76ad1e7a3671_JaffaCakes118.exe windows:5 windows x86 arch:x86
eb326275520a67dab012bfa2a0077b61
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetACP
GetVersion
GlobalFindAtomW
lstrlenA
GetCurrentProcess
MulDiv
GetTickCount
GetModuleHandleW
SetCurrentDirectoryA
GetConsoleOutputCP
RemoveDirectoryA
GetWindowsDirectoryA
GetCommandLineW
lstrcmpiA
CopyFileA
lstrlenW
GlobalFindAtomA
GetDriveTypeA
DeleteFileA
QueryPerformanceCounter
GetCurrentThreadId
GetThreadLocale
GetProcessHeap
GetCurrentProcessId
IsDebuggerPresent
GetUserDefaultLangID
GetModuleHandleA
GetCommandLineA
lstrcmpA
GetOEMCP
GetCurrentThread
DeleteFileW
VirtualAlloc
VirtualFree
lstrcmpiW
user32
GetSystemMetrics
GetParent
GetDC
TranslateMessage
CharNextA
GetDesktopWindow
gdi32
SelectPalette
GetClipBox
GetPixel
SaveDC
DeleteDC
SetMapMode
PatBlt
SetTextAlign
SelectObject
LineTo
CreateFontIndirectA
RestoreDC
CreateCompatibleDC
CreatePen
SetStretchBltMode
GetObjectA
GetDeviceCaps
GetStockObject
DeleteObject
SetTextColor
CreatePalette
CreateSolidBrush
GetTextMetricsA
RectVisible
glu32
gluNurbsCallback
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Arywtmtf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Cjcnntfm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ