Static task
static1
Behavioral task
behavioral1
Sample
73500bd86eb5052b20a1b4bf4b121893_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
73500bd86eb5052b20a1b4bf4b121893_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73500bd86eb5052b20a1b4bf4b121893_JaffaCakes118
-
Size
112KB
-
MD5
73500bd86eb5052b20a1b4bf4b121893
-
SHA1
4a93d660c1b7034b9cf526a5b590e678ea2dd2b8
-
SHA256
ed6d2b2fc798fe53a28dd0c4fab7fbc22a61bd3c06e301773ea016963438c69d
-
SHA512
1efae0a7dcdba3e332d59e38e74ffe915ba8d00dc22aeb7575876d0382f14f5fa949c8aaca29551452efe7f89563621c9f2befe66d2c04fcc99e1d1a619de28c
-
SSDEEP
1536:96luLuxFSvYiF5vMLm/DjW6vgtqPQukyL5EEqmncu5qDoVRzdISaP2gec:9noFQYe577j0QPBHEWtRqSaP2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73500bd86eb5052b20a1b4bf4b121893_JaffaCakes118
Files
-
73500bd86eb5052b20a1b4bf4b121893_JaffaCakes118.exe windows:5 windows x86 arch:x86
6a14ae7abf503964a98444598b410c0d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDeviceCaps
CreateCompatibleDC
CreatePalette
SaveDC
GetPixel
DeleteObject
LineTo
CreateSolidBrush
GetTextMetricsA
CreateFontIndirectA
GetObjectA
RestoreDC
SetMapMode
GetClipBox
RectVisible
SelectObject
DeleteDC
GetStockObject
SetStretchBltMode
SetTextColor
SelectPalette
CreatePen
SetTextAlign
PatBlt
SetPixel
user32
CharNextA
GetSystemMetrics
GetParent
TranslateMessage
GetDesktopWindow
kernel32
CopyFileA
RemoveDirectoryA
GetWindowsDirectoryA
GlobalFindAtomW
GetACP
GetCurrentProcess
lstrcmpiW
GetCurrentThread
GetVersion
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
GetModuleHandleA
lstrcmpA
GetDriveTypeA
lstrlenA
DeleteFileW
GetOEMCP
DeleteFileA
SetCurrentDirectoryA
GetThreadLocale
GetTickCount
QueryPerformanceCounter
lstrcmpiA
GetModuleHandleW
VirtualAlloc
MulDiv
VirtualFree
GlobalFindAtomA
GetUserDefaultLangID
GetStartupInfoA
GetCommandLineW
GetCurrentProcessId
lstrlenW
IsDebuggerPresent
GetConsoleOutputCP
RemoveDirectoryW
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ