Static task
static1
Behavioral task
behavioral1
Sample
779e22c4551acf00e7d9c0afc99e0cd6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
779e22c4551acf00e7d9c0afc99e0cd6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
779e22c4551acf00e7d9c0afc99e0cd6_JaffaCakes118
-
Size
136KB
-
MD5
779e22c4551acf00e7d9c0afc99e0cd6
-
SHA1
f1c62ae88b829150b293be67001b1aa533515b3a
-
SHA256
b3b06d2f146c827a124c744bb18ea01fe3e5a2c5020a83e41d3948e52c5afe70
-
SHA512
864bc82faee5dbe56e6bcc5ce19d93a4dd0fc40028fe09cc599771867c69423a3dba455faa33dc5ca33e4935bad7bd94eed95db83af15ac2dda121575aab661c
-
SSDEEP
3072:6Aj5tBQWWnkKwAi+/3z+EdEA+cHCmRZgSdByLQzwGJ:zBXj+r+fAFCmbgSdByLQ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 779e22c4551acf00e7d9c0afc99e0cd6_JaffaCakes118
Files
-
779e22c4551acf00e7d9c0afc99e0cd6_JaffaCakes118.exe windows:4 windows x86 arch:x86
c9dda2fd2e985d4034b1bea78e3a94de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBitmap
MaskBlt
Rectangle
SetStretchBltMode
ExcludeClipRect
SelectObject
EndPage
SelectClipPath
DPtoLP
OffsetViewportOrgEx
IntersectClipRect
SetBkColor
GetEnhMetaFilePaletteEntries
BitBlt
SetBkMode
DeleteDC
SelectPalette
BeginPath
PlayEnhMetaFile
StartPage
PatBlt
DeleteObject
ScaleViewportExtEx
PtVisible
RectVisible
Chord
GetPaletteEntries
SetColorSpace
GetPixel
CreateRectRgn
GetClipBox
SetBrushOrgEx
CreatePatternBrush
RestoreDC
SetWindowExtEx
GetStockObject
SetTextColor
SetViewportOrgEx
SetDIBColorTable
CreatePen
GetCharWidth32A
MoveToEx
SetMapMode
EndDoc
GetTextMetricsA
LineTo
EndPath
GetDeviceCaps
GetDCOrgEx
LPtoDP
GetBrushOrgEx
GetDIBColorTable
user32
CharNextA
kernel32
GetVersion
GetOEMCP
GetProcessHeap
RemoveDirectoryA
lstrlenW
GetModuleHandleA
GetTickCount
GetCommandLineA
GetModuleHandleW
GetLastError
CopyFileA
SetCurrentDirectoryA
GetCurrentProcess
GetCommandLineW
MulDiv
GetThreadLocale
DeleteFileA
lstrcmpiW
GlobalFindAtomA
DeleteFileW
lstrlenA
GetCurrentProcessId
SetLastError
GetCurrentThread
GetACP
lstrcmpA
lstrcmpiA
IsDebuggerPresent
GetCurrentThreadId
GetUserDefaultLangID
GlobalFindAtomW
GetConsoleOutputCP
VirtualAlloc
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ