Static task
static1
Behavioral task
behavioral1
Sample
2fedcf5ed680dec1ddeae87d4ac8871f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fedcf5ed680dec1ddeae87d4ac8871f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fedcf5ed680dec1ddeae87d4ac8871f_JaffaCakes118
-
Size
111KB
-
MD5
2fedcf5ed680dec1ddeae87d4ac8871f
-
SHA1
57244f0e1525145f58f949aba96eda33aa434d45
-
SHA256
d2f3e1bf5175409df8711c97ea5f7404934e129ae7291702fa0233cdb5d35df6
-
SHA512
3e7f0e6f6e9129e3841ffcd83d0242b3fc160fd26902f724441fec5363842be338ce22a7afd511eb8b9ae543665eaf11fa60a91e17abe4e27f6d210194276b3f
-
SSDEEP
1536:zXnhMyIXsG7fEqnq2Z8ogRsfhdFeladUOeH4zMVnxH10Oj05xi6Ef+k/poHah:zXhS/7fEqnFZ8LoelmUOixHll/poHa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fedcf5ed680dec1ddeae87d4ac8871f_JaffaCakes118
Files
-
2fedcf5ed680dec1ddeae87d4ac8871f_JaffaCakes118.exe windows:4 windows x86 arch:x86
deb13f9f25945efc7b978a1d2ee0c80b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SelectPalette
SetTextColor
GetStockObject
SetStretchBltMode
SetMapMode
DeleteDC
RectVisible
GetObjectA
GetDeviceCaps
CreateFontIndirectA
SetTextAlign
SelectObject
RestoreDC
CreatePalette
CreateSolidBrush
SaveDC
CreateCompatibleDC
GetClipBox
kernel32
lstrcmpA
lstrlenW
CopyFileA
GetWindowsDirectoryA
QueryPerformanceCounter
lstrcmpiA
RemoveDirectoryA
VirtualAlloc
VirtualFree
GetModuleHandleA
DeleteFileA
GlobalFindAtomA
GetCommandLineA
lstrcmpiW
GetSystemTime
lstrlenA
RemoveDirectoryW
FindClose
user32
GetDesktopWindow
TranslateMessage
GetSystemMetrics
CharNextA
GetDC
GetParent
glu32
gluNurbsCallback
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ