Static task
static1
Behavioral task
behavioral1
Sample
255b453e566e36a9ef9c95bc3550b815_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
255b453e566e36a9ef9c95bc3550b815_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
255b453e566e36a9ef9c95bc3550b815_JaffaCakes118
-
Size
107KB
-
MD5
255b453e566e36a9ef9c95bc3550b815
-
SHA1
4ee6be6d55e7e8ea4fc8c5432dfa3d805d59332d
-
SHA256
9a49c5b210ec522b317f00b2246a005c9f2b0bd59a9c11d8a938ffc0d1a342e2
-
SHA512
45d71852a0c3e2b456c9a6285f2a71b1199af6a515a9454d12fb071132cb42586d0fb0cbc698d0fead64370b32d6265ff2ebb99a0d4d827a883978c621bc2e5c
-
SSDEEP
1536:TKmLNteNVzvLWvx9ickg1e89o48ADRr9LhoqfYR46yZd7WCaiA49CqvyL:TzsR1bCN9CxR8Zd7WbiA49CqvY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 255b453e566e36a9ef9c95bc3550b815_JaffaCakes118
Files
-
255b453e566e36a9ef9c95bc3550b815_JaffaCakes118.exe windows:5 windows x86 arch:x86
e1827777be1257c80e3cc06d4eef0d0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharNextA
GetDC
GetParent
GetSystemMetrics
TranslateMessage
GetDesktopWindow
kernel32
DeleteFileA
GlobalFindAtomW
GetCommandLineW
GetACP
GetWindowsDirectoryA
GetConsoleOutputCP
VirtualAlloc
lstrcmpiW
GetOEMCP
GetCurrentProcess
VirtualFree
GetCommandLineA
lstrcmpA
IsDebuggerPresent
GetTickCount
GetThreadLocale
GetCurrentThreadId
GetDriveTypeA
GetModuleHandleW
CopyFileA
GetStartupInfoA
MulDiv
GetCurrentThread
GetProcessHeap
GlobalFindAtomA
GetVersion
RemoveDirectoryA
GetUserDefaultLangID
RemoveDirectoryW
GetModuleHandleA
DeleteFileW
GetCurrentProcessId
QueryPerformanceCounter
lstrlenA
lstrlenW
ExitProcess
lstrcmpiA
SetCurrentDirectoryA
gdi32
RectVisible
GetTextMetricsA
GetDeviceCaps
SelectPalette
LineTo
GetClipBox
SaveDC
SelectObject
SetMapMode
CreatePen
RestoreDC
CreateFontIndirectA
DeleteObject
GetObjectA
SetTextAlign
SetTextColor
GetPixel
PatBlt
CreatePalette
SetStretchBltMode
GetStockObject
GetNearestPaletteIndex
DeleteDC
CreateCompatibleDC
CreateSolidBrush
glu32
gluQuadricCallback
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ