Static task
static1
Behavioral task
behavioral1
Sample
35440c422b902f2dba13ae74fc632e6f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
35440c422b902f2dba13ae74fc632e6f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35440c422b902f2dba13ae74fc632e6f_JaffaCakes118
-
Size
113KB
-
MD5
35440c422b902f2dba13ae74fc632e6f
-
SHA1
bb4578669c8fe29eabff152e994664d8337ae80a
-
SHA256
3ec2ad4958a42177bcec605e342b624802bb9a02acc7243aff0031269f54d4f3
-
SHA512
b936fa0ed5ae4bd71a8a6928aee78985910960802ac32cce32f45b29cc78dfdb4e11f6ade3b26133c619af68ebddfcfc3afba1ae1c1c9a8d01d5bea8619dc45b
-
SSDEEP
3072:HJOI+2C6jTWptU6ePgjJ6SQkl4+HAmY/D9:l+oWptU6exSzVgmi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35440c422b902f2dba13ae74fc632e6f_JaffaCakes118
Files
-
35440c422b902f2dba13ae74fc632e6f_JaffaCakes118.exe windows:5 windows x86 arch:x86
b8c9ad7f76582b579d846e454dbd2d3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
GetCurrentThreadId
lstrcmpiA
GetStartupInfoA
GlobalFindAtomA
RemoveDirectoryA
GetCurrentProcess
GetACP
GetWindowsDirectoryA
GetCommandLineW
GetModuleHandleA
MulDiv
GlobalFindAtomW
CopyFileA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
DeleteFileA
IsDebuggerPresent
GetDriveTypeA
GetProcessHeap
lstrlenA
GetUserDefaultLangID
GetModuleHandleW
lstrcmpiW
GetVersion
SetCurrentDirectoryA
RemoveDirectoryW
GetCurrentThread
lstrcmpA
GetThreadLocale
GetCommandLineA
GetOEMCP
GetConsoleOutputCP
DeleteFileW
VirtualAlloc
VirtualFree
user32
TranslateMessage
GetSystemMetrics
GetDesktopWindow
GetParent
CharNextA
gdi32
SetStretchBltMode
SelectObject
SelectPalette
SaveDC
SetTextAlign
DeleteDC
CreateCompatibleDC
GetPixel
CreateFontIndirectA
LineTo
GetClipBox
GetDeviceCaps
CreateSolidBrush
GetStockObject
CreatePalette
SetTextColor
RectVisible
CreatePen
GetTextMetricsA
DeleteObject
RestoreDC
GetObjectA
SetPixel
SetMapMode
PatBlt
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ