Static task
static1
Behavioral task
behavioral1
Sample
7411ec98b4ca3dff826b6a7a7a3f7a25_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7411ec98b4ca3dff826b6a7a7a3f7a25_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7411ec98b4ca3dff826b6a7a7a3f7a25_JaffaCakes118
-
Size
167KB
-
MD5
7411ec98b4ca3dff826b6a7a7a3f7a25
-
SHA1
6c5f024c4af132810f4cfd708203248711c18f81
-
SHA256
121acd9caf36008868354ce1a003ad175616c936d2718f58b0597bd407f3bdd4
-
SHA512
721b728133e1effddac37d3734fa8d63975159ecae754e1028e6fa0170377a186d051b2af7aca58b664fe698a46cac29c2d62b687c34e5f73c6f3ac0f7039d80
-
SSDEEP
3072:EY5iut0Wn9DBqbU6+wKB2hd+K6GVVsg1h9ho/FwN1:EYQuumgU6+wK4VT3f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7411ec98b4ca3dff826b6a7a7a3f7a25_JaffaCakes118
Files
-
7411ec98b4ca3dff826b6a7a7a3f7a25_JaffaCakes118.exe windows:5 windows x86 arch:x86
08b8c80ef7b1edaabcfecf0c8107a7ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateFontIndirectA
SetTextAlign
GetObjectA
DeleteDC
RectVisible
GetTextMetricsA
RestoreDC
GetPixel
GetClipBox
LineTo
CreatePalette
CreateSolidBrush
SetTextColor
CreateCompatibleDC
SaveDC
SelectObject
DeleteObject
SetMapMode
GetDeviceCaps
PatBlt
SelectPalette
GetStockObject
CreatePen
user32
GetDC
GetParent
CharNextA
GetDesktopWindow
GetSystemMetrics
TranslateMessage
kernel32
GetTickCount
GetUserDefaultLangID
GlobalFindAtomW
lstrlenW
GetACP
GetOEMCP
DeleteFileW
GetCommandLineW
GetCurrentProcess
GetWindowsDirectoryA
GetCommandLineA
QueryPerformanceCounter
GetCurrentProcessId
DeleteFileA
GetModuleHandleA
IsDebuggerPresent
GetStartupInfoA
GetDriveTypeA
GlobalFindAtomA
GetCurrentThreadId
GetModuleHandleW
CopyFileA
SetCurrentDirectoryA
GetConsoleOutputCP
lstrlenA
lstrcmpiW
RemoveDirectoryA
MulDiv
GetThreadLocale
GetVersion
GetProcessHeap
lstrcmpA
VirtualAlloc
lstrcmpiA
VirtualFree
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Beq, Chw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Paadgvar Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE