Static task
static1
Behavioral task
behavioral1
Sample
2473783d6c01fd97fd02083d97368d74_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2473783d6c01fd97fd02083d97368d74_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2473783d6c01fd97fd02083d97368d74_JaffaCakes118
-
Size
333KB
-
MD5
2473783d6c01fd97fd02083d97368d74
-
SHA1
6156d0c79bf08471f6a238cf89001b455bad6ae7
-
SHA256
d4a40f4463218a9c0d3df77c5a088d5f9a3904ec59face10ac40ffc5fa0dcae8
-
SHA512
afcb5d45878e5ded8e8eff254b415a86e3a6d0cbad7175f786bc1691ab42d9b1877511373734b00b446764e8aca0da61905249f9d1184b8b34fdc30cb3029655
-
SSDEEP
6144:NLvUoi8QzrWGh5uHBQcvErAsbt5NW8fHMh6yv:Nwoir73W6UGTW8fH0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2473783d6c01fd97fd02083d97368d74_JaffaCakes118
Files
-
2473783d6c01fd97fd02083d97368d74_JaffaCakes118.exe windows:4 windows x86 arch:x86
30f15ed7aa71ff3c7e295c77e9ed30bf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetCurrentThread
GetTickCount
GetCommandLineW
GetLastError
lstrlenA
MulDiv
GetACP
GetProcessHeap
CopyFileA
GetCommandLineA
SetLastError
lstrlenW
lstrcmpA
SetCurrentDirectoryA
VirtualAlloc
GetDriveTypeA
user32
GetMessagePos
CharNextA
GetInputState
GetDesktopWindow
gdi32
UnrealizeObject
GetDCOrgEx
RestoreDC
SetViewportOrgEx
SetBkColor
SelectPalette
SetColorSpace
GetDIBColorTable
GetTextMetricsA
GetPaletteEntries
SetWindowExtEx
GetStockObject
BeginPath
MoveToEx
GetPixel
SetMapMode
EndPath
ExcludeClipRect
SetBrushOrgEx
LineTo
comctl32
InitCommonControls
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.irdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE