Static task
static1
Behavioral task
behavioral1
Sample
869b1abfb12a58ef23e0638529de0552_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
869b1abfb12a58ef23e0638529de0552_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
869b1abfb12a58ef23e0638529de0552_JaffaCakes118
-
Size
115KB
-
MD5
869b1abfb12a58ef23e0638529de0552
-
SHA1
859a3480c3f3c574dee8ead7b243e3ee6d5e3556
-
SHA256
a7bcd10d901f19aab1c5acf309a02203a7c4aaecc24475fd8b2fe2fc589ffb0d
-
SHA512
9a5404ae38b3eed9348327cd2d04f0d32992399b582118f0e483a71ba3b5b7d5520878249f9d5466731071424ece6918dda02e12f1f6b32d04e9fb94143d017c
-
SSDEEP
1536:ZI24g/QuMJ1dX+StkCNwxRqiWLvzn5E/PfOr/9peHQe2fkhmf36qoZxXAR8MAOG:ZI2FfMbdX2GQM5E3S/9BsZAR7LG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 869b1abfb12a58ef23e0638529de0552_JaffaCakes118
Files
-
869b1abfb12a58ef23e0638529de0552_JaffaCakes118.exe windows:5 windows x86 arch:x86
8a1c8b37d5fba01bf5a4003d48df250b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RectVisible
GetStockObject
GetTextMetricsA
SelectPalette
DeleteObject
CreateCompatibleDC
SetTextAlign
SetTextColor
RestoreDC
CreateSolidBrush
SetPixel
PatBlt
SetStretchBltMode
SelectObject
GetObjectA
SaveDC
GetDeviceCaps
CreatePalette
DeleteDC
CreatePen
GetClipBox
LineTo
CreateFontIndirectA
SetMapMode
GetPixel
kernel32
GetModuleHandleW
QueryPerformanceCounter
RemoveDirectoryA
GetCurrentProcessId
GetACP
GetOEMCP
MulDiv
GetCommandLineA
lstrlenA
GetCurrentProcess
DeleteFileA
RemoveDirectoryW
IsDebuggerPresent
GetCommandLineW
GetUserDefaultLangID
GetThreadLocale
GetWindowsDirectoryA
lstrcmpA
GetDriveTypeA
GlobalFindAtomA
GetProcessHeap
SetCurrentDirectoryA
CopyFileA
DeleteFileW
GetCurrentThread
GetConsoleOutputCP
GlobalFindAtomW
GetStartupInfoA
lstrlenW
lstrcmpiW
GetVersion
GetTickCount
GetModuleHandleA
lstrcmpiA
GetCurrentThreadId
VirtualAlloc
VirtualFree
user32
GetSystemMetrics
GetDesktopWindow
GetParent
CharNextA
TranslateMessage
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ