Static task
static1
Behavioral task
behavioral1
Sample
48362812369960d35ab5c2566e1cf2f1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48362812369960d35ab5c2566e1cf2f1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
48362812369960d35ab5c2566e1cf2f1_JaffaCakes118
-
Size
103KB
-
MD5
48362812369960d35ab5c2566e1cf2f1
-
SHA1
2b2f6191494b10b279ce40f353e8051607e4b2d5
-
SHA256
2faebb4704c7b8337d3112ae785c6f7644113fc146161e5fa1f5646f02ae639d
-
SHA512
969461f2f592e95729945badc660001c827bc757e1f6d4f85ca872ca51963f448c04070295453ea8c238be5651fab5882d03f446993f066352c0b789cddf34a8
-
SSDEEP
3072:CU2f50OKV7xXKjTu2OOviC+Pyo2GSM1NAi:Cx0OK3IRzUyv6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48362812369960d35ab5c2566e1cf2f1_JaffaCakes118
Files
-
48362812369960d35ab5c2566e1cf2f1_JaffaCakes118.exe windows:5 windows x86 arch:x86
1a1f9fb13dfde429d8bd3ada1eb48252
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateSolidBrush
SaveDC
RestoreDC
CreateCompatibleDC
LineTo
GetTextMetricsA
CreatePalette
CreateFontIndirectA
DeleteDC
SelectObject
GetStockObject
SetStretchBltMode
DeleteObject
GetObjectA
SelectPalette
GetPixel
SetTextAlign
SetTextColor
GetDeviceCaps
kernel32
GetSystemTime
RemoveDirectoryA
lstrlenA
GlobalFindAtomA
GetCommandLineA
lstrlenW
GetModuleHandleA
lstrcmpiW
lstrcmpA
QueryPerformanceCounter
DeleteFileA
lstrcmpiA
VirtualAlloc
CopyFileA
VirtualFree
GetWindowsDirectoryA
RemoveDirectoryW
FindClose
user32
CharNextA
GetDC
GetParent
GetSystemMetrics
TranslateMessage
GetDesktopWindow
glu32
gluNurbsCallback
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ