Static task
static1
Behavioral task
behavioral1
Sample
756e5ee38345d2844fa45e33b2eee68f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
756e5ee38345d2844fa45e33b2eee68f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
756e5ee38345d2844fa45e33b2eee68f_JaffaCakes118
-
Size
114KB
-
MD5
756e5ee38345d2844fa45e33b2eee68f
-
SHA1
98d0d60e3629eda4982a3d4a459bf42e29223e82
-
SHA256
0180ef49bb7868fb7a5cf6b1dab8e94631149e7d303bb3f477d554531a2b246f
-
SHA512
9f0e9bab694bf90e35b55fde25cf748f82986904fec05ca5fff175476d8ac531d729a68313d02080d75254e578e8c6b9366dcd80eeed8624ef2cc404b6c18bb5
-
SSDEEP
1536:8G3f8wzB/b8DBa3eS0NuhUo7QLQA8rhZWToTcV1SCueafhiKIDZoHeiR9hCfR:BvlbMS0Nm5ULQDrnuL1Sp5V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 756e5ee38345d2844fa45e33b2eee68f_JaffaCakes118
Files
-
756e5ee38345d2844fa45e33b2eee68f_JaffaCakes118.exe windows:5 windows x86 arch:x86
3461dafc44740e20dbf3cd77e47a4c07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetParent
TranslateMessage
GetDesktopWindow
CharNextA
GetSystemMetrics
gdi32
CreateSolidBrush
RestoreDC
CreatePalette
SelectObject
DeleteDC
SetMapMode
SetTextColor
SetStretchBltMode
CreateCompatibleDC
GetDeviceCaps
GetClipBox
LineTo
CreatePen
GetTextMetricsA
GetPixel
GetObjectA
SetTextAlign
SetPixel
RectVisible
SaveDC
GetStockObject
SelectPalette
CreateFontIndirectA
PatBlt
DeleteObject
kernel32
GlobalFindAtomW
QueryPerformanceCounter
GetOEMCP
lstrcmpA
GetModuleHandleA
GetCommandLineA
GetModuleHandleW
GetThreadLocale
lstrcmpiA
GetCurrentThreadId
lstrlenA
IsDebuggerPresent
GetWindowsDirectoryA
GlobalFindAtomA
CopyFileA
lstrcmpiW
RemoveDirectoryW
GetConsoleOutputCP
lstrlenW
GetCurrentThread
SetCurrentDirectoryA
GetCommandLineW
GetVersion
RemoveDirectoryA
GetCurrentProcess
GetDriveTypeA
GetProcessHeap
GetACP
DeleteFileA
GetTickCount
GetUserDefaultLangID
GetStartupInfoA
MulDiv
DeleteFileW
GetCurrentProcessId
VirtualAlloc
VirtualFree
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ