Static task
static1
Behavioral task
behavioral1
Sample
6748d49f8ff754329afb5d7d5dc2f285_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6748d49f8ff754329afb5d7d5dc2f285_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6748d49f8ff754329afb5d7d5dc2f285_JaffaCakes118
-
Size
114KB
-
MD5
6748d49f8ff754329afb5d7d5dc2f285
-
SHA1
cb58326ee6557755cc29c3cb88e80c434bc3fce3
-
SHA256
0c944f540b8f027e67b5b62d371acc10c094946ac0d620575d662e7c7f8a7410
-
SHA512
6126b25792e2331296fa887995d8876b6bc2c09749aad4ce3caecf72f96092ec0eb5d6044ff155a11671108528acac4f0af5bcd4b6487c052a0e6408c3f082b6
-
SSDEEP
1536:BMchsU1XETlujeu2nCe+nvVZ7u0X69f+/aE9OPgUF7Pmmb3GnWasz48DzKwg:BMssT72v/7u0XfoF7hGnBJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6748d49f8ff754329afb5d7d5dc2f285_JaffaCakes118
Files
-
6748d49f8ff754329afb5d7d5dc2f285_JaffaCakes118.exe windows:5 windows x86 arch:x86
e2530973f45f1313c44083a0068bfac2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetParent
CharNextA
GetDesktopWindow
TranslateMessage
GetSystemMetrics
kernel32
GetOEMCP
GetCurrentThreadId
GetCommandLineA
GetConsoleOutputCP
GetWindowsDirectoryA
GetUserDefaultLangID
GetModuleHandleW
lstrcmpA
RemoveDirectoryA
lstrlenA
SetCurrentDirectoryA
GetModuleHandleA
GetCommandLineW
GetTickCount
GetACP
CopyFileA
GlobalFindAtomW
lstrcmpiW
GetStartupInfoA
DeleteFileW
QueryPerformanceCounter
GlobalFindAtomA
MulDiv
GetCurrentProcess
lstrcmpiA
GetProcessHeap
GetVersion
GetCurrentThread
RemoveDirectoryW
GetCurrentProcessId
GetDriveTypeA
lstrlenW
GetThreadLocale
IsDebuggerPresent
VirtualAlloc
VirtualFree
gdi32
CreateCompatibleDC
CreateSolidBrush
RectVisible
SaveDC
GetStockObject
CreateFontIndirectA
PatBlt
SetMapMode
DeleteDC
GetClipBox
GetObjectA
GetPixel
LineTo
DeleteObject
SetStretchBltMode
SetTextColor
CreatePalette
SelectObject
SelectPalette
RestoreDC
GetTextMetricsA
SetTextAlign
SetPixel
CreatePen
GetDeviceCaps
glu32
gluQuadricCallback
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ