Static task
static1
Behavioral task
behavioral1
Sample
3f9e140fbbeca73687c6553562ae57eb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f9e140fbbeca73687c6553562ae57eb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f9e140fbbeca73687c6553562ae57eb_JaffaCakes118
-
Size
93KB
-
MD5
3f9e140fbbeca73687c6553562ae57eb
-
SHA1
9a815f2d9cc877a067844a205b67e1d88011e578
-
SHA256
0169c3b28def3d488a3a661c050544b4ed3c8f4361255c4c77e5351a6f3b6784
-
SHA512
4240cb595acb2d24deb89ace2f73e6007e220fe1810ba34a1a2cf9fbc35d3e28a0b5da583a633619d4f1400f4a9bc3867aa8b71e65d70306b4418c87d30c8c17
-
SSDEEP
1536:nuCtv3HBMqmyg8/gogR4Nqs6Hwf3/BTZsf3ZpO5ELWMkpyqjd5WA6uFmdGTGN2oX:uCx3HBEkYZqNzGwfDsB6yWxpguUdGTGj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f9e140fbbeca73687c6553562ae57eb_JaffaCakes118
Files
-
3f9e140fbbeca73687c6553562ae57eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
fd1b061dd731b8d535dfaf891f0be200
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetTextColor
PatBlt
GetObjectA
SetTextAlign
SetMapMode
GetTextMetricsA
GetPixel
SelectObject
CreatePalette
DeleteDC
GetDeviceCaps
CreateSolidBrush
CreateCompatibleDC
SelectPalette
GetClipBox
GetStockObject
SaveDC
LineTo
GetNearestPaletteIndex
SetStretchBltMode
RectVisible
CreateFontIndirectA
CreatePen
DeleteObject
RestoreDC
kernel32
GetProcessHeap
GetUserDefaultLangID
GetModuleHandleW
IsDebuggerPresent
GetDriveTypeA
lstrlenW
GetVersion
GetModuleHandleA
GlobalFindAtomW
lstrcmpiA
lstrcmpA
GetConsoleOutputCP
GetOEMCP
lstrcmpiW
GetCurrentThreadId
GetACP
VirtualAlloc
QueryPerformanceCounter
GetTickCount
DeleteFileA
GetCommandLineW
SetCurrentDirectoryA
lstrlenA
DeleteFileW
GetThreadLocale
GetCurrentThread
RemoveDirectoryW
GetWindowsDirectoryA
GetCurrentProcessId
CopyFileA
GetStartupInfoA
ExitProcess
GlobalFindAtomA
GetCurrentProcess
MulDiv
RemoveDirectoryA
GetCommandLineA
user32
GetDC
GetDesktopWindow
GetSystemMetrics
CharNextA
TranslateMessage
GetParent
glu32
gluQuadricCallback
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ