Static task
static1
Behavioral task
behavioral1
Sample
2719c9c8df8a73f9d6f9a55e53478eb4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2719c9c8df8a73f9d6f9a55e53478eb4_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2719c9c8df8a73f9d6f9a55e53478eb4_JaffaCakes118
-
Size
261KB
-
MD5
2719c9c8df8a73f9d6f9a55e53478eb4
-
SHA1
bc2422c6c40324141afb9d53bcba3cffae9f90b5
-
SHA256
c61590d3fe2e727d151f46d45c2b6241aa093d752f5cde5f61bfc302e7f5a9d2
-
SHA512
157af2bd08029d8f8a339580211ae28dc76b5208984f20fb0b91c0ea7be66bef559bf14730feaa3ca1a67681676561c5640c6804149a70068f30e64223305ca2
-
SSDEEP
3072:MOLwBxxLiDB+bKn7rocdp8jlsEg5dHnf60ZTO6NXk9INKyT5PMRL4UyVBR:MOwzo++7Els5nfFTOf+nT5PMRcUy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2719c9c8df8a73f9d6f9a55e53478eb4_JaffaCakes118
Files
-
2719c9c8df8a73f9d6f9a55e53478eb4_JaffaCakes118.exe windows:4 windows x86 arch:x86
c1126269c2fd43c64c7d0e6c15feff23
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControls
user32
GetInputState
CharNextA
GetDesktopWindow
GetMessagePos
gdi32
SetMapMode
GetTextMetricsA
GetPaletteEntries
SetViewportOrgEx
SetBrushOrgEx
SelectPalette
OffsetViewportOrgEx
SetBkMode
BeginPath
EndDoc
GetDeviceCaps
SetWindowExtEx
SetBkColor
SetTextColor
MoveToEx
kernel32
GetModuleHandleA
GetCurrentThread
lstrcmpiW
VirtualAlloc
GetACP
GetCommandLineA
GetVersion
lstrcmpA
GetCurrentThreadId
RemoveDirectoryA
GetThreadLocale
GetUserDefaultLangID
DeleteFileW
GetCommandLineW
GetDriveTypeA
GlobalFindAtomW
GetCurrentProcessId
GetOEMCP
GlobalFindAtomA
lstrlenW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ