Static task
static1
Behavioral task
behavioral1
Sample
8c6bc9a794dde1f69798ac4c0f5755cb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8c6bc9a794dde1f69798ac4c0f5755cb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c6bc9a794dde1f69798ac4c0f5755cb_JaffaCakes118
-
Size
167KB
-
MD5
8c6bc9a794dde1f69798ac4c0f5755cb
-
SHA1
35b26cbd9a4f7bcd44ce990fbdd7a1af6ee4ba1f
-
SHA256
17dcd28b6d641e5296df9d4e835ac2bf217480cf63b52fee273f48fc1d26b44b
-
SHA512
0c659fdb09f68a3e82cafbe28fac58cd3b15be5b56e7b72c6321ade5171c7cf150eba352d9e81a80834c7d800a2784a4303e7f890bf24c2ec19382ab119e7a6f
-
SSDEEP
3072:51AGbWMwO+UPd0Wobd5FFFFFMdWNgTcSrpGO:51AGbWed7SQdWNgoeh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c6bc9a794dde1f69798ac4c0f5755cb_JaffaCakes118
Files
-
8c6bc9a794dde1f69798ac4c0f5755cb_JaffaCakes118.exe windows:5 windows x86 arch:x86
37177563ea9d3fbd887fd60a93cff17b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetCurrentThreadId
RemoveDirectoryA
GetCommandLineA
GetOEMCP
GetConsoleOutputCP
GetUserDefaultLangID
GetStartupInfoA
GetTickCount
GetCurrentThread
GetModuleHandleA
GetModuleHandleW
MulDiv
IsDebuggerPresent
SetCurrentDirectoryA
GetVersion
VirtualAlloc
CopyFileA
VirtualFree
GetWindowsDirectoryA
QueryPerformanceCounter
GlobalFindAtomW
GetACP
GetThreadLocale
lstrcmpiW
GetProcessHeap
GetDriveTypeA
GetCommandLineW
DeleteFileW
lstrlenA
lstrlenW
lstrcmpA
lstrcmpiA
GlobalFindAtomA
DeleteFileA
user32
GetDesktopWindow
TranslateMessage
GetParent
GetDC
CharNextA
GetSystemMetrics
gdi32
CreateFontIndirectA
SetMapMode
GetObjectA
RestoreDC
GetTextMetricsA
CreateCompatibleDC
SelectObject
SetTextAlign
SetTextColor
CreateSolidBrush
CreatePen
DeleteDC
CreatePalette
GetDeviceCaps
LineTo
SelectPalette
SetStretchBltMode
PatBlt
SaveDC
DeleteObject
GetClipBox
GetPixel
GetStockObject
RectVisible
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Lgoidfyr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Ptfcvw Y Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ