Static task
static1
Behavioral task
behavioral1
Sample
33c62fc751c9e19b72e938689bbd7f2b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33c62fc751c9e19b72e938689bbd7f2b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33c62fc751c9e19b72e938689bbd7f2b_JaffaCakes118
-
Size
94KB
-
MD5
33c62fc751c9e19b72e938689bbd7f2b
-
SHA1
3d51d00b952f52251126c83c2262b4c21b5ae771
-
SHA256
46fdc08cd4a1c53ad791c2570746d3a7e47294dcacac67e1bf392848e338f255
-
SHA512
b1c3446ab4b3e3f33b5f07ee961fdc292feb77b89152ae5a3e535de1705246b144d1a763f6ec76dbce743b3e6d45bf5d89457a11fe2b5262b2f84c074f6a90ed
-
SSDEEP
1536:PNqlSTrw2PZ9s1KF/l0OotdWEllCIGKt7ZBPPZmTwGXwvJx2zDAEnN:PQM80Dot1l35mq2zN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33c62fc751c9e19b72e938689bbd7f2b_JaffaCakes118
Files
-
33c62fc751c9e19b72e938689bbd7f2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d3ab83b0c81d4da8321b39a24e3b6442
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SelectPalette
CreatePen
GetStockObject
SetTextAlign
PatBlt
CreateSolidBrush
CreateCompatibleDC
DeleteDC
CreatePalette
SelectObject
GetTextMetricsA
GetPixel
GetClipBox
SetStretchBltMode
RectVisible
SaveDC
SetTextColor
DeleteObject
RestoreDC
GetNearestPaletteIndex
LineTo
GetDeviceCaps
GetObjectA
SetMapMode
CreateFontIndirectA
kernel32
GetModuleHandleA
GetCommandLineW
GetWindowsDirectoryA
GetCurrentProcess
GetDriveTypeA
GetConsoleOutputCP
GetStartupInfoA
GetCurrentThread
lstrcmpiA
DeleteFileW
GetACP
RemoveDirectoryW
lstrlenW
GetTickCount
RemoveDirectoryA
GetModuleHandleW
lstrcmpiW
SetCurrentDirectoryA
GetThreadLocale
DeleteFileA
GetCurrentThreadId
ExitProcess
GetUserDefaultLangID
GetProcessHeap
lstrlenA
GetCommandLineA
QueryPerformanceCounter
GlobalFindAtomA
VirtualAlloc
IsDebuggerPresent
GetOEMCP
GetVersion
CopyFileA
MulDiv
user32
GetParent
GetDC
TranslateMessage
GetSystemMetrics
GetDesktopWindow
CharNextA
glu32
gluQuadricCallback
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ