Static task
static1
Behavioral task
behavioral1
Sample
66458955713e10b130172b46748f77df_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
66458955713e10b130172b46748f77df_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66458955713e10b130172b46748f77df_JaffaCakes118
-
Size
111KB
-
MD5
66458955713e10b130172b46748f77df
-
SHA1
5ad1c618f52f7547fd9711b28cfcf03094b6b431
-
SHA256
f53f6557a37ec11c99bf7817cbd2c42c4adfd82d98307a7ffa211ac9b2675965
-
SHA512
21707026c1eaf2528ffe092347eb27e4f820774ede72a6db54294bf3e127a1680c35e7961c7d0360ef7146314c7c469e62c8188020e2e503b1c915dcac798fc1
-
SSDEEP
1536:gLpLRyrQsUoFnMOemjbeZVO8P3tUfpwFRQ56J/mLDUnbkUc48mgoUc:M4NUo1MOP+y83/AAVc4IoUc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66458955713e10b130172b46748f77df_JaffaCakes118
Files
-
66458955713e10b130172b46748f77df_JaffaCakes118.exe windows:5 windows x86 arch:x86
497a1f0220ca88b7fd16239c9f4dc763
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
GetConsoleOutputCP
CopyFileA
DeleteFileA
GetStartupInfoA
GetModuleHandleA
GetCommandLineW
GlobalFindAtomA
GetCommandLineA
GetVersion
MulDiv
GetCurrentProcess
DeleteFileW
GetDriveTypeA
GetACP
GetUserDefaultLangID
GetThreadLocale
lstrlenW
GetModuleHandleW
lstrcmpiW
GetCurrentThread
GetProcessHeap
GetOEMCP
QueryPerformanceCounter
RemoveDirectoryW
GetCurrentThreadId
RemoveDirectoryA
lstrcmpA
lstrlenA
IsDebuggerPresent
lstrcmpiA
GetTickCount
SetCurrentDirectoryA
VirtualAlloc
VirtualFree
GlobalFindAtomW
GetCurrentProcessId
user32
GetParent
CharNextA
GetDesktopWindow
TranslateMessage
GetSystemMetrics
gdi32
SelectObject
DeleteDC
RectVisible
CreatePalette
GetTextMetricsA
SetMapMode
SetTextAlign
GetClipBox
GetDeviceCaps
CreateSolidBrush
SetStretchBltMode
GetObjectA
SetTextColor
CreatePen
CreateCompatibleDC
DeleteObject
RestoreDC
SelectPalette
CreateFontIndirectA
GetStockObject
SetPixel
GetPixel
LineTo
PatBlt
SaveDC
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ