Static task
static1
Behavioral task
behavioral1
Sample
336accc0d93ea3b7b5e2874d1ebb8bbf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
336accc0d93ea3b7b5e2874d1ebb8bbf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
336accc0d93ea3b7b5e2874d1ebb8bbf_JaffaCakes118
-
Size
115KB
-
MD5
336accc0d93ea3b7b5e2874d1ebb8bbf
-
SHA1
0e9d5f6cfa93c6543d84054e7968795506e71184
-
SHA256
25e3734d26027a8b537875608d9e87b124640a5c607227ae7ce3614c3891d672
-
SHA512
bfe0f4f7fbe333f5dbd3146a7575232a96f707ae5561aafd2ac11f67cefb9813906a4bca22b2beb8388f8f5a01e8e03e653a67a5861c9c7d1470061673300f9d
-
SSDEEP
1536:ZPeKPNFsHFVQupyBdV2YSWomlr1aEoOAI/LgyYVwZs+v49Bggmg:RrVCRyBL37ay/LuVwSLBq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 336accc0d93ea3b7b5e2874d1ebb8bbf_JaffaCakes118
Files
-
336accc0d93ea3b7b5e2874d1ebb8bbf_JaffaCakes118.exe windows:5 windows x86 arch:x86
5d3e507dd3c7e0d4ad89d96433e1715d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
PatBlt
CreatePen
GetDeviceCaps
SetMapMode
CreateSolidBrush
RestoreDC
SetStretchBltMode
SelectPalette
DeleteDC
CreateCompatibleDC
GetClipBox
GetTextMetricsA
SetPixel
CreatePalette
LineTo
SetTextAlign
SetTextColor
SelectObject
RectVisible
GetObjectA
GetPixel
CreateFontIndirectA
SaveDC
DeleteObject
GetStockObject
user32
GetDesktopWindow
TranslateMessage
CharNextA
GetSystemMetrics
GetParent
kernel32
lstrcmpiA
GetUserDefaultLangID
GetVersion
GetModuleHandleA
GetProcessHeap
GetCurrentThreadId
GetModuleHandleW
lstrcmpiW
GetCurrentThread
GetStartupInfoA
GetACP
GetConsoleOutputCP
CopyFileA
RemoveDirectoryW
GlobalFindAtomW
MulDiv
RemoveDirectoryA
GetOEMCP
SetCurrentDirectoryA
IsDebuggerPresent
GetCommandLineA
lstrlenA
lstrlenW
GetCurrentProcess
GetWindowsDirectoryA
GetThreadLocale
GetCommandLineW
DeleteFileW
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
GetDriveTypeA
GlobalFindAtomA
VirtualAlloc
DeleteFileA
VirtualFree
glu32
gluQuadricCallback
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ