Static task
static1
Behavioral task
behavioral1
Sample
69128ccd2e9abbdddcb2b92db08f97f1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69128ccd2e9abbdddcb2b92db08f97f1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69128ccd2e9abbdddcb2b92db08f97f1_JaffaCakes118
-
Size
110KB
-
MD5
69128ccd2e9abbdddcb2b92db08f97f1
-
SHA1
41576d641cb983dd2e3dae193d98ffeaa355e46b
-
SHA256
177079bf150f0aa267195154b80f0a833609c7babc8379172808aa2ecc7c88d1
-
SHA512
f98c3d1c08ed2dcace05ce77185175905b3548a8d74f047958753225edee7a10c849285b55292d4fca3962fcfcabf8f4efd049c737eb94fd1668c204111e0f08
-
SSDEEP
3072:AqFPptAN7RFiPQakMeJ/JWzXtj8ZMxxW6iSSYlu/URr0lx:AqFhOhyPQakJJWz9IZA/iAlJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69128ccd2e9abbdddcb2b92db08f97f1_JaffaCakes118
Files
-
69128ccd2e9abbdddcb2b92db08f97f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
ddc53ba129c6e76cfde8ee94cb85fd6e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDesktopWindow
GetParent
GetSystemMetrics
GetDC
TranslateMessage
CharNextA
gdi32
DeleteDC
SelectPalette
GetStockObject
SetMapMode
SaveDC
SetTextAlign
RectVisible
SetStretchBltMode
GetPixel
GetTextMetricsA
CreateSolidBrush
CreateFontIndirectA
RestoreDC
GetClipBox
CreatePalette
LineTo
SelectObject
GetObjectA
CreateCompatibleDC
SetTextColor
kernel32
QueryPerformanceCounter
CopyFileA
RemoveDirectoryW
FindClose
lstrcmpiW
GetCommandLineA
GlobalFindAtomA
lstrlenW
GetWindowsDirectoryA
GetModuleHandleA
lstrlenA
RemoveDirectoryA
DeleteFileA
lstrcmpiA
GetSystemTime
VirtualAlloc
VirtualFree
glu32
gluNurbsCallback
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ