Static task
static1
Behavioral task
behavioral1
Sample
5f8f9a5958c25c3df78667aa1e5a382c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f8f9a5958c25c3df78667aa1e5a382c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f8f9a5958c25c3df78667aa1e5a382c_JaffaCakes118
-
Size
170KB
-
MD5
5f8f9a5958c25c3df78667aa1e5a382c
-
SHA1
b1178eca3b814d52f0ec568e0b903326933baccc
-
SHA256
ea95dc9eb9cf74ea665c7808c1f8ec2b9d54e174dbd117145087c06600caa816
-
SHA512
13ceabb93cc032319555f8f76fe85bd34bb359ff979a7beb704f62be608d1b6a0a94d464a013dd2eb1de5a94e4d54cdddca2c222093d9eff2cb1949e83d493c3
-
SSDEEP
3072:Qba7hd+hEwPd4H9qJ3qkIFpVIEsY7KpDfbCCqbhstsI+FtUni0:Q27qhn14s6pzi7q6DfbCCqbI+8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f8f9a5958c25c3df78667aa1e5a382c_JaffaCakes118
Files
-
5f8f9a5958c25c3df78667aa1e5a382c_JaffaCakes118.exe windows:5 windows x86 arch:x86
560cacef7709edf28c9a970e86cb8bc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
RestoreDC
GetPixel
SetTextAlign
SetMapMode
PatBlt
SetTextColor
GetDeviceCaps
GetStockObject
SaveDC
GetObjectA
DeleteDC
CreateCompatibleDC
CreateSolidBrush
SetStretchBltMode
SelectObject
CreatePalette
LineTo
GetClipBox
RectVisible
CreatePen
CreateFontIndirectA
GetTextMetricsA
SelectPalette
user32
GetSystemMetrics
TranslateMessage
GetDesktopWindow
CharNextA
GetParent
GetDC
kernel32
DeleteFileW
GetUserDefaultLangID
GetCurrentThreadId
GetModuleHandleA
GetTickCount
lstrlenW
lstrcmpiW
GetCommandLineW
DeleteFileA
lstrlenA
GetConsoleOutputCP
GetStartupInfoA
GetVersion
GetACP
CopyFileA
GetCommandLineA
GlobalFindAtomA
GetCurrentThread
GetModuleHandleW
GetThreadLocale
SetCurrentDirectoryA
GetWindowsDirectoryA
RemoveDirectoryA
GetDriveTypeA
lstrcmpiA
GetCurrentProcessId
lstrcmpA
GlobalFindAtomW
QueryPerformanceCounter
GetProcessHeap
GetOEMCP
IsDebuggerPresent
MulDiv
GetCurrentProcess
VirtualAlloc
VirtualFree
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Xgfx Cff Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Sifmhdqq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ