Static task
static1
Behavioral task
behavioral1
Sample
73227d24e2e99e1593c8ca837baed5cc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
73227d24e2e99e1593c8ca837baed5cc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73227d24e2e99e1593c8ca837baed5cc_JaffaCakes118
-
Size
261KB
-
MD5
73227d24e2e99e1593c8ca837baed5cc
-
SHA1
46779e4d9b0b9f7773c599f5a244c7adac544ffd
-
SHA256
31a4696f201f7a4e9f271a80fbb858b2406eff255945eebd0e194413e30b3156
-
SHA512
8e2f5124e6c0b48113c5ccbfa7d7f327a323a068d97a519a649c0cb41ae1a4aa806e958af7546ae792ec88bc6c6257204e20d50ad4458e1193d5fe587035e8c6
-
SSDEEP
3072:2zawHOB/0OoQHoaIVio+TwJG92ppZLst6mkBa8ToQaKMBq6bca1ySYRbGl+PGd3:2zJEDoTwyJYxhkBa8ToPfYil
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73227d24e2e99e1593c8ca837baed5cc_JaffaCakes118
Files
-
73227d24e2e99e1593c8ca837baed5cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
34405001ca70cdc7e4db58b580bb9f9a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControls
gdi32
LineTo
BeginPath
GetPixel
GetStockObject
GetDCOrgEx
GetDeviceCaps
SelectPalette
GetDIBColorTable
MoveToEx
SetViewportOrgEx
OffsetViewportOrgEx
SetBkMode
SetBkColor
SetMapMode
RestoreDC
GetTextMetricsA
SetWindowExtEx
SetBrushOrgEx
user32
GetDesktopWindow
CharNextA
GetMessagePos
GetInputState
kernel32
CopyFileA
DeleteFileA
GlobalFindAtomW
GetUserDefaultLangID
GetModuleHandleA
GetCurrentThreadId
GetVersion
GetCommandLineA
GetCurrentProcess
VirtualAlloc
GetThreadLocale
MulDiv
lstrlenA
GetCommandLineW
GetCurrentThread
lstrlenW
SetLastError
lstrcmpiW
SetCurrentDirectoryA
GlobalFindAtomA
GetACP
GetProcessHeap
GetLastError
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ