Static task
static1
Behavioral task
behavioral1
Sample
82ccbe60b2bf14817b0e6729eabb7d49_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
82ccbe60b2bf14817b0e6729eabb7d49_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
82ccbe60b2bf14817b0e6729eabb7d49_JaffaCakes118
-
Size
187KB
-
MD5
82ccbe60b2bf14817b0e6729eabb7d49
-
SHA1
46edebf1891a31a68844a488a66b5139a926d9ee
-
SHA256
9ccebe42d0b5079692cd769cc6c2a7e3714f17569c2f7a8bcda80dec3cbfe487
-
SHA512
7c4413f3c31dca75ca828f913a66d7de51c2a1ba8fe93947f54c90c0e2a6475942a80e79819f8f77cec9287d67d5cce8f1611c0623e2ac387b8ef68a227e54fd
-
SSDEEP
3072:nXaN1uK97/+DdGcrB7Sgl6qEwAZlKFW7nRJ4bHgNkbB9GmsaVlFF:nXaNh97ydPSaKwAZkcRJ4bH1OhaD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82ccbe60b2bf14817b0e6729eabb7d49_JaffaCakes118
Files
-
82ccbe60b2bf14817b0e6729eabb7d49_JaffaCakes118.exe windows:4 windows x86 arch:x86
46e5ceb39b07f645881ca1ced03fbb99
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetGraphicsMode
Rectangle
IntersectClipRect
SetROP2
PolylineTo
GetStockObject
BeginPath
LineTo
MoveToEx
GetClipBox
GetGraphicsMode
PolyBezierTo
SelectClipPath
EndPath
FillPath
CloseFigure
GetWorldTransform
SetBrushOrgEx
CreatePatternBrush
PolyDraw
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
SetHandleCount
SetLastError
GlobalAddAtomW
GetLocalTime
GetStdHandle
GetVersion
GetCurrentThread
GetModuleHandleW
QueryPerformanceCounter
TlsAlloc
GlobalMemoryStatus
TerminateProcess
RaiseException
GetSystemTimeAsFileTime
TlsGetValue
GetFileType
EnumResourceNamesA
GetDiskFreeSpaceA
GetProcessHeap
GetTickCount
DeviceIoControl
GetComputerNameA
GetStartupInfoA
GetModuleFileNameA
GetCurrentProcess
CloseHandle
OutputDebugStringW
GetVersionExA
GetCurrentProcessId
TlsSetValue
GetCommandLineA
HeapAlloc
SetUnhandledExceptionFilter
TlsFree
HeapFree
RtlUnwind
InterlockedExchange
Sections
.text Size: 95KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ