Static task
static1
Behavioral task
behavioral1
Sample
33b6b4be0e5982f1cc8ae4fffb29705d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33b6b4be0e5982f1cc8ae4fffb29705d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33b6b4be0e5982f1cc8ae4fffb29705d_JaffaCakes118
-
Size
113KB
-
MD5
33b6b4be0e5982f1cc8ae4fffb29705d
-
SHA1
dbfef2a8227da41f4022d0fd924d260833e3cd87
-
SHA256
c6af28f12d446761b5874a2a4f6945c8006f740e1974363ebac5c7dcb42e6e23
-
SHA512
4d5ae624500ab8e1d4cb0c74fbe4f93473820139a71fc9656b1d565ad44d010cd9ce6117b5a8cc155f3e30fce5f8dd606ab9ad6c92e7f6401460401ecf8c376d
-
SSDEEP
1536:ITPOwuK0gr+8CX6rQ20E6zjpNc/oxW7rlfN9Qghypzky3i6Ey90pJaUMxB9jv:I6XKOX6rQ236vp1srlH9h2kJaUOj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33b6b4be0e5982f1cc8ae4fffb29705d_JaffaCakes118
Files
-
33b6b4be0e5982f1cc8ae4fffb29705d_JaffaCakes118.exe windows:4 windows x86 arch:x86
d4bce2c0db19606052d1757f8944ebc6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetObjectA
CreateCompatibleDC
DeleteObject
RestoreDC
SelectPalette
GetPixel
GetDeviceCaps
GetStockObject
CreatePalette
DeleteDC
SelectObject
GetTextMetricsA
SetTextAlign
SetTextColor
GetClipBox
LineTo
RectVisible
SaveDC
SetMapMode
CreateFontIndirectA
user32
GetSystemMetrics
GetDesktopWindow
TranslateMessage
CharNextA
GetParent
GetDC
kernel32
lstrlenW
GetWindowsDirectoryA
VirtualAlloc
CopyFileA
GetSystemTime
lstrcmpiA
RemoveDirectoryA
DeleteFileA
VirtualFree
GetCommandLineA
lstrcmpA
lstrlenA
QueryPerformanceCounter
GlobalFindAtomA
lstrcmpiW
RemoveDirectoryW
FindClose
GetModuleHandleA
glu32
gluNurbsCallback
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ