Static task
static1
Behavioral task
behavioral1
Sample
4278634da2d8bdbe4a3e28d0c93a7674_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4278634da2d8bdbe4a3e28d0c93a7674_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4278634da2d8bdbe4a3e28d0c93a7674_JaffaCakes118
-
Size
97KB
-
MD5
4278634da2d8bdbe4a3e28d0c93a7674
-
SHA1
75ef32511e8eedb2032f2bd408e1cc2e4c934d80
-
SHA256
c03168c5da0705f63fd33af66b3b136f17978159f764a5d42ec36717b6eeed22
-
SHA512
5bedb8c453e9a3090585eea0b88d7d27858a2310666048b0d7ff499780f9f73af1bbd61266f54926c644f73cbb285de825c62407461f3403b2a7fa53e76c7fd9
-
SSDEEP
1536:sQy2TzEe0jbcikJC5yZjoQG8yygrZ1D3DrcAGdRg8K3LHToqWamRuEE9PZ:sLEibGJCIj7wDzwAGdq8i8qW1IP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4278634da2d8bdbe4a3e28d0c93a7674_JaffaCakes118
Files
-
4278634da2d8bdbe4a3e28d0c93a7674_JaffaCakes118.exe windows:4 windows x86 arch:x86
3b719648a5694aae294e7ab947e47f62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
LineTo
DeleteObject
SelectObject
CreatePalette
SaveDC
CreatePen
GetTextMetricsA
SetStretchBltMode
SetTextAlign
GetClipBox
DeleteDC
CreateSolidBrush
CreateCompatibleDC
GetPixel
SetMapMode
RestoreDC
SetTextColor
GetObjectA
PatBlt
SelectPalette
CreateFontIndirectA
GetDeviceCaps
RectVisible
GetNearestPaletteIndex
GetStockObject
kernel32
GetCommandLineW
GetTickCount
lstrlenA
MulDiv
GetUserDefaultLangID
DeleteFileA
GetCurrentThread
CopyFileA
GetACP
GetCommandLineA
GetVersion
GetProcessHeap
GetCurrentProcess
SetCurrentDirectoryA
IsDebuggerPresent
GlobalFindAtomW
lstrlenW
lstrcmpA
GlobalFindAtomA
VirtualAlloc
GetModuleHandleA
DeleteFileW
RemoveDirectoryA
VirtualFree
QueryPerformanceCounter
lstrcmpiW
GetThreadLocale
GetOEMCP
GetConsoleOutputCP
GetStartupInfoA
lstrcmpiA
RemoveDirectoryW
GetCurrentThreadId
GetCurrentProcessId
GetDriveTypeA
ExitProcess
user32
GetDC
TranslateMessage
GetDesktopWindow
GetParent
GetSystemMetrics
CharNextA
glu32
gluQuadricCallback
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ