Static task
static1
Behavioral task
behavioral1
Sample
30b94e3bc541e52a001890e9b0a8769c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
30b94e3bc541e52a001890e9b0a8769c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30b94e3bc541e52a001890e9b0a8769c_JaffaCakes118
-
Size
114KB
-
MD5
30b94e3bc541e52a001890e9b0a8769c
-
SHA1
d37c7e2cee4b426d0a616625c14d9f346ae402d6
-
SHA256
567ee29e2ca692603fb05f66f59479ab8b10d5ca519678bcf43af00711eb75d0
-
SHA512
0326a4cc36077a327cee4684eb8791366a6fcf1b1ba2d3ffb43e1e9369089351595850e1210f61c556e3aaaa9231b70ccf55108d0745798b62c4d5734214b5fc
-
SSDEEP
1536:Nj8ugKpP5V49M8IvjZPPQaQO2Euw9F4CSfoZhRkSiJ73VkC9jvF1SusM:58uPPPOMbjZNXrg4bkF4C7FW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30b94e3bc541e52a001890e9b0a8769c_JaffaCakes118
Files
-
30b94e3bc541e52a001890e9b0a8769c_JaffaCakes118.exe windows:5 windows x86 arch:x86
5bc90d611c62b5ee497b335c95b71186
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetACP
CopyFileA
DeleteFileW
lstrcmpiW
GetUserDefaultLangID
QueryPerformanceCounter
GetCurrentProcess
GetModuleHandleA
lstrcmpiA
GetThreadLocale
GetCurrentThreadId
GetCurrentThread
GetCommandLineW
IsDebuggerPresent
MulDiv
GetConsoleOutputCP
GlobalFindAtomA
DeleteFileA
GetStartupInfoA
GlobalFindAtomW
lstrlenA
GetCurrentProcessId
GetProcessHeap
GetOEMCP
VirtualAlloc
GetWindowsDirectoryA
GetModuleHandleW
VirtualFree
GetDriveTypeA
GetTickCount
RemoveDirectoryA
SetCurrentDirectoryA
lstrcmpA
lstrlenW
GetVersion
RemoveDirectoryW
gdi32
SelectPalette
SelectObject
GetPixel
GetClipBox
GetDeviceCaps
CreateSolidBrush
SetMapMode
CreatePen
DeleteDC
CreateCompatibleDC
DeleteObject
SetTextAlign
GetTextMetricsA
SetTextColor
GetStockObject
RectVisible
CreateFontIndirectA
LineTo
PatBlt
RestoreDC
SaveDC
GetObjectA
CreatePalette
SetStretchBltMode
SetPixel
user32
CharNextA
GetParent
GetDesktopWindow
TranslateMessage
GetSystemMetrics
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ