Static task
static1
Behavioral task
behavioral1
Sample
83d3ce2efc015446fe665f3d0c859a64_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83d3ce2efc015446fe665f3d0c859a64_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83d3ce2efc015446fe665f3d0c859a64_JaffaCakes118
-
Size
167KB
-
MD5
83d3ce2efc015446fe665f3d0c859a64
-
SHA1
3c1a6ec5661644daa1695a7bc3d6b158f735737b
-
SHA256
981d74bb444a46c5d8ddf74557ac87992ca9852f0f0c7baf1e878e2b2745f24a
-
SHA512
37a356a24d11ade9b2650e059aebaaa4fd57cfdf335e1b1c64ac90babab6da726145a7afb3e28bdd08f66c8042191db19495b92c0cf1e7edac78a6d24fb24f0a
-
SSDEEP
3072:9O7mMw6EAaglBkUq4/qTls1yGnMCbDHSM4IUuKRgOlf:gJvvqxs1rMayM4Icd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83d3ce2efc015446fe665f3d0c859a64_JaffaCakes118
Files
-
83d3ce2efc015446fe665f3d0c859a64_JaffaCakes118.exe windows:5 windows x86 arch:x86
a06f4a890971b7a77a9db2906b8b8553
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteDC
GetTextMetricsA
DeleteObject
SaveDC
RectVisible
CreateSolidBrush
RestoreDC
GetObjectA
LineTo
GetStockObject
GetDeviceCaps
SetTextColor
PatBlt
CreatePen
SetTextAlign
SelectPalette
SetMapMode
CreateFontIndirectA
SetStretchBltMode
GetPixel
SelectObject
CreatePalette
CreateCompatibleDC
GetClipBox
user32
GetParent
GetSystemMetrics
GetDesktopWindow
TranslateMessage
GetDC
CharNextA
kernel32
lstrcmpA
lstrcmpiA
DeleteFileW
GetModuleHandleA
SetCurrentDirectoryA
lstrlenA
GetCurrentProcess
GetTickCount
GetDriveTypeA
VirtualAlloc
GetModuleHandleW
GetThreadLocale
GlobalFindAtomA
GetConsoleOutputCP
GetCommandLineW
lstrcmpiW
CopyFileA
VirtualFree
RemoveDirectoryA
GetACP
GetCommandLineA
GetCurrentThreadId
GetUserDefaultLangID
GetOEMCP
IsDebuggerPresent
MulDiv
QueryPerformanceCounter
DeleteFileA
GetProcessHeap
GetCurrentProcessId
lstrlenW
GlobalFindAtomW
GetWindowsDirectoryA
GetVersion
GetStartupInfoA
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Tbxap, I Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Ftfbbkdd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ