Static task
static1
Behavioral task
behavioral1
Sample
61326670cb0a19ecc3e85694699e713a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61326670cb0a19ecc3e85694699e713a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61326670cb0a19ecc3e85694699e713a_JaffaCakes118
-
Size
96KB
-
MD5
61326670cb0a19ecc3e85694699e713a
-
SHA1
82bb41750994cb30be1ded035e58d996eaa44160
-
SHA256
57dae68d1fa752f807bab021223a806a53d8f04ac0a24a9b5684ddeffb55ff45
-
SHA512
d7a01abb050f2df0324e694094a0a3b46dbf9745ba4b9df7f3304ae8c5f5dc80a24fa90f5acf503d9b1e6c1dab4e7233e0702d6cb21319c96a305a18e7eee49a
-
SSDEEP
1536:nK8bbE8HZ6NYKw3k42n67pPqjV5kAUXVfx2cPDUD6eVMUW3O99Ryo1o2:5ZKc2nApPAVOAUFfx2cPDUDhVie99Rd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61326670cb0a19ecc3e85694699e713a_JaffaCakes118
Files
-
61326670cb0a19ecc3e85694699e713a_JaffaCakes118.exe windows:4 windows x86 arch:x86
0da744d89edad9d92baf9b06eeaee372
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
CharNextA
TranslateMessage
GetDesktopWindow
GetParent
GetSystemMetrics
kernel32
GetVersion
QueryPerformanceCounter
lstrcmpA
DeleteFileA
GetCommandLineA
GetTickCount
GetModuleHandleW
GlobalFindAtomW
lstrlenA
CopyFileA
GetConsoleOutputCP
lstrcmpiW
GetStartupInfoA
GetThreadLocale
GetModuleHandleA
GetOEMCP
lstrlenW
GetWindowsDirectoryA
VirtualAlloc
GetDriveTypeA
GetProcessHeap
DeleteFileW
MulDiv
GetCurrentProcessId
GetCommandLineW
RemoveDirectoryA
lstrcmpiA
GetUserDefaultLangID
GetACP
GetCurrentProcess
GetCurrentThreadId
GetCurrentThread
SetCurrentDirectoryA
RemoveDirectoryW
ExitProcess
GlobalFindAtomA
gdi32
CreateSolidBrush
GetTextMetricsA
SetMapMode
SetStretchBltMode
SetTextAlign
CreatePalette
CreateFontIndirectA
RestoreDC
DeleteDC
DeleteObject
SetTextColor
CreateCompatibleDC
RectVisible
SelectPalette
GetPixel
GetStockObject
PatBlt
SaveDC
LineTo
GetClipBox
GetObjectA
SelectObject
GetDeviceCaps
CreatePen
GetNearestPaletteIndex
glu32
gluQuadricCallback
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ