Static task
static1
Behavioral task
behavioral1
Sample
6261c4a2243b64a31c3018d819cbba2f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6261c4a2243b64a31c3018d819cbba2f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6261c4a2243b64a31c3018d819cbba2f_JaffaCakes118
-
Size
94KB
-
MD5
6261c4a2243b64a31c3018d819cbba2f
-
SHA1
29aedf7c71276f77db2700f1198f767b0380e205
-
SHA256
0d0b873fdf1b7ef83bf3451c746aad6256792360d7d8af151871a6bd160274a9
-
SHA512
c94ac37cc20f117bb5c83078f3810a12cbb58aaeaf8621816bb46639e802dde0ef4c6e08ef5f80756d2fea775b136bd219c250f467240374b51f8b368cfe8165
-
SSDEEP
1536:2FDhGjFJC+/NbORcZqrNzHkmydQQFSfmsFpK8S9pFHs7gg8iz0Iha6jNFVVi3vNa:2FDhco+lbteHnPy/XHCD84z06jN+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6261c4a2243b64a31c3018d819cbba2f_JaffaCakes118
Files
-
6261c4a2243b64a31c3018d819cbba2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
3a065b19f1ec56d51c3fa561f009d669
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
MulDiv
GetOEMCP
lstrlenW
GetCurrentProcessId
GetModuleHandleW
GlobalFindAtomA
GetUserDefaultLangID
DeleteFileA
GetDriveTypeA
DeleteFileW
GetConsoleOutputCP
GetCurrentProcess
CopyFileA
lstrcmpiW
SetCurrentDirectoryA
GetACP
lstrlenA
lstrcmpiA
GetWindowsDirectoryA
GetVersion
GetTickCount
GetStartupInfoA
lstrcmpA
GlobalFindAtomW
GetCurrentThread
QueryPerformanceCounter
GetCommandLineW
GetProcessHeap
GetCurrentThreadId
IsDebuggerPresent
GetCommandLineA
VirtualAlloc
VirtualFree
RemoveDirectoryW
GetThreadLocale
ExitProcess
user32
GetParent
GetSystemMetrics
CharNextA
GetDC
TranslateMessage
GetDesktopWindow
gdi32
SetTextAlign
RestoreDC
CreateFontIndirectA
GetObjectA
SetMapMode
SaveDC
SetTextColor
SelectPalette
CreatePen
DeleteObject
PatBlt
SelectObject
LineTo
GetPixel
RectVisible
SetStretchBltMode
CreatePalette
GetClipBox
CreateCompatibleDC
GetStockObject
GetTextMetricsA
GetDeviceCaps
DeleteDC
GetNearestPaletteIndex
CreateSolidBrush
glu32
gluQuadricCallback
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ