Static task
static1
Behavioral task
behavioral1
Sample
6059e4a0c036064a7d5784bdd95474fd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6059e4a0c036064a7d5784bdd95474fd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6059e4a0c036064a7d5784bdd95474fd_JaffaCakes118
-
Size
116KB
-
MD5
6059e4a0c036064a7d5784bdd95474fd
-
SHA1
29a81dd3ec42dd045685207a23a9d37a942cf3c9
-
SHA256
46dee58a4ab428f20bfef8673bb249b59d8f191f4f3e728799175fb986fb6be5
-
SHA512
8a057efcc1b96674f7689a22e457d255f3c349855cadd8f9a63f31c760c2ada52477d3e028b411d03a2a6f5db8e943004349f281d4b687cc384a0460b50d5b72
-
SSDEEP
3072:kMqZksvDqhx0fKnbf/H8fhNRe9WOIT8WsQ:CksvUa2/H8fyI8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6059e4a0c036064a7d5784bdd95474fd_JaffaCakes118
Files
-
6059e4a0c036064a7d5784bdd95474fd_JaffaCakes118.exe windows:5 windows x86 arch:x86
996bcdccc8431ef350062855935479b7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
GetConsoleOutputCP
SetCurrentDirectoryA
GlobalFindAtomA
GetCommandLineW
GetProcessHeap
GetCurrentThread
lstrcmpiA
GetWindowsDirectoryA
GetCommandLineA
GetCurrentThreadId
lstrcmpA
MulDiv
GetCurrentProcess
CopyFileA
GetModuleHandleA
DeleteFileW
GetUserDefaultLangID
GetModuleHandleW
lstrcmpiW
GetThreadLocale
GetCurrentProcessId
GetACP
QueryPerformanceCounter
GetVersion
GetTickCount
IsDebuggerPresent
RemoveDirectoryA
RemoveDirectoryW
GetStartupInfoA
lstrlenW
GetOEMCP
lstrlenA
VirtualAlloc
VirtualFree
GlobalFindAtomW
DeleteFileA
gdi32
SaveDC
CreateCompatibleDC
DeleteObject
CreateFontIndirectA
CreatePen
GetObjectA
GetTextMetricsA
SelectObject
GetStockObject
RectVisible
DeleteDC
GetClipBox
RestoreDC
LineTo
GetPixel
SetStretchBltMode
SetMapMode
CreatePalette
CreateSolidBrush
PatBlt
GetDeviceCaps
SelectPalette
SetPixel
SetTextColor
SetTextAlign
user32
TranslateMessage
GetSystemMetrics
CharNextA
GetParent
GetDesktopWindow
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ