Static task
static1
Behavioral task
behavioral1
Sample
68c9af84366533b65590acce19d389d5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68c9af84366533b65590acce19d389d5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68c9af84366533b65590acce19d389d5_JaffaCakes118
-
Size
272KB
-
MD5
68c9af84366533b65590acce19d389d5
-
SHA1
62a2657ae7076be35234b9d079675e9d00cc3407
-
SHA256
7811c717459936b85cc2e3950e88b9b77fdeaa825e6733af5f4f648fa258601a
-
SHA512
549f3e4322f1c8845df7f258454e52099f817f806f696ea33a1d25cf73eb18cf347b03cc55c663edee5e39fb7d11f108e68c48bcca1ad0bfa0633f9f079d2c2b
-
SSDEEP
6144:ybSHh+ej41k304re+nW3rxeK+s9bHM//u9Sx4mMppov+7a:ybSBW1I04qaG+sxs/0Lduv+G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68c9af84366533b65590acce19d389d5_JaffaCakes118
Files
-
68c9af84366533b65590acce19d389d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
185fe30a0d26528573103c66267a38df
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomW
GetTickCount
HeapAlloc
HeapFree
GetCurrentProcess
GetStdHandle
SetLastError
GetSystemTimeAsFileTime
GlobalMemoryStatus
GetFileType
GetProcessHeap
GetCommandLineA
DeviceIoControl
GetVersion
RtlUnwind
GetStartupInfoA
GetCurrentThread
GetComputerNameA
EnumResourceNamesA
SetUnhandledExceptionFilter
QueryPerformanceCounter
TerminateProcess
GetDiskFreeSpaceA
GetModuleFileNameA
GetVersionExA
OutputDebugStringW
CloseHandle
GetModuleHandleW
SetHandleCount
GetCurrentProcessId
TlsFree
GetLocalTime
RaiseException
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedExchange
gdi32
SetROP2
LineTo
CloseFigure
PolyBezierTo
GetWorldTransform
FillPath
GetGraphicsMode
SetGraphicsMode
CreatePatternBrush
SelectClipPath
BeginPath
IntersectClipRect
GetStockObject
MoveToEx
EndPath
PolylineTo
Rectangle
SetBrushOrgEx
GetClipBox
PolyDraw
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 134KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ