Static task
static1
Behavioral task
behavioral1
Sample
660c02cffd7d7bd461b3064fb6464267_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
660c02cffd7d7bd461b3064fb6464267_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
660c02cffd7d7bd461b3064fb6464267_JaffaCakes118
-
Size
113KB
-
MD5
660c02cffd7d7bd461b3064fb6464267
-
SHA1
460d31beb9c0ee88cf33b598ecbd3de6635ddb0e
-
SHA256
59180fa1cdb1e0c2ea189b5ed16bbb4af8fee6219e6c6c3d1be905ce028066e5
-
SHA512
c59990370b3326c0f68878ae49a4f87f51badf156a59adef774eb339852e30d696b37b82376f1623900a2c305e782c5a8502a3b5556c247ac8eb3bd0e8714e88
-
SSDEEP
1536:7vd2tIe8bfp5sCjq//BfttpFWwae/tGiLob/VwpHBIxoDL7aQPnW9nR5:7V2d8bfp59jq//Bf+atNLobdwf/a9nR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 660c02cffd7d7bd461b3064fb6464267_JaffaCakes118
Files
-
660c02cffd7d7bd461b3064fb6464267_JaffaCakes118.exe windows:5 windows x86 arch:x86
0c3bd928d79cad72bad3de952862361a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetClipBox
RectVisible
CreateFontIndirectA
PatBlt
SaveDC
CreateCompatibleDC
GetPixel
SetStretchBltMode
GetObjectA
SetTextAlign
RestoreDC
CreateSolidBrush
DeleteDC
LineTo
SelectObject
CreatePen
GetDeviceCaps
GetTextMetricsA
DeleteObject
CreatePalette
GetStockObject
SelectPalette
SetMapMode
SetTextColor
SetPixel
user32
TranslateMessage
GetParent
CharNextA
GetDesktopWindow
GetSystemMetrics
kernel32
lstrlenW
SetCurrentDirectoryA
GetDriveTypeA
lstrcmpiW
GetWindowsDirectoryA
GetCommandLineA
lstrlenA
MulDiv
GlobalFindAtomW
GetTickCount
GetStartupInfoA
CopyFileA
GetCommandLineW
lstrcmpiA
GetProcessHeap
GetThreadLocale
RemoveDirectoryA
QueryPerformanceCounter
DeleteFileA
GetCurrentThread
DeleteFileW
GetCurrentProcess
IsDebuggerPresent
GetCurrentThreadId
GetUserDefaultLangID
GetVersion
GetOEMCP
GlobalFindAtomA
GetACP
GetConsoleOutputCP
lstrcmpA
GetCurrentProcessId
GetModuleHandleA
RemoveDirectoryW
GetModuleHandleW
VirtualAlloc
VirtualFree
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ