Static task
static1
Behavioral task
behavioral1
Sample
33d66deed0278c85b9f7f45bc61d86c6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33d66deed0278c85b9f7f45bc61d86c6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33d66deed0278c85b9f7f45bc61d86c6_JaffaCakes118
-
Size
89KB
-
MD5
33d66deed0278c85b9f7f45bc61d86c6
-
SHA1
287ff948472638fbabe612408b0f91a397f22ce1
-
SHA256
dee523fbce23ddb923d25ad67b3231489edbeed9db5be7da359cdf8cc10376cf
-
SHA512
068e93d71b3c68446ddea9820a876b579e2497d50eec29dc73f4f999de1cd61d12da3d3b50e67affa4cce939fe60a92ac0c161a1ceda3e23239b914a80ee538e
-
SSDEEP
1536:kdlceWqcnJyBPVDKC0CAMBqtfrtL4AnPmKklS3JFD:kQJyBv7dAOjS3J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33d66deed0278c85b9f7f45bc61d86c6_JaffaCakes118
Files
-
33d66deed0278c85b9f7f45bc61d86c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
1e1de5e344f35c27b2db75517ed8b44e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleOutputCP
GetCurrentProcess
GlobalFindAtomA
GetThreadLocale
GetCommandLineW
GetUserDefaultLangID
GetWindowsDirectoryA
lstrlenW
lstrcmpA
DeleteFileA
MulDiv
GetStartupInfoA
QueryPerformanceCounter
GetOEMCP
IsDebuggerPresent
GlobalFindAtomW
GetModuleHandleA
CopyFileA
RemoveDirectoryA
GetVersion
lstrcmpiW
lstrcmpiA
GetCurrentThreadId
GetACP
GetDriveTypeA
VirtualAlloc
GetCurrentThread
SetCurrentDirectoryA
GetProcessHeap
GetTickCount
lstrlenA
GetCurrentProcessId
GetCommandLineA
GetModuleHandleW
DeleteFileW
RemoveDirectoryW
ExitProcess
user32
GetDesktopWindow
CharNextA
GetSystemMetrics
TranslateMessage
GetDC
GetParent
gdi32
SelectPalette
LineTo
RestoreDC
CreatePen
DeleteObject
SaveDC
RectVisible
PatBlt
GetStockObject
SetMapMode
SetTextColor
GetPixel
SelectObject
GetDeviceCaps
SetTextAlign
CreateSolidBrush
CreatePalette
GetTextMetricsA
GetClipBox
SetStretchBltMode
GetObjectA
DeleteDC
CreateCompatibleDC
CreateFontIndirectA
GetNearestPaletteIndex
glu32
gluQuadricCallback
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ