Static task
static1
Behavioral task
behavioral1
Sample
88cff6be1eb92eaf8a3238baf4552098_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
88cff6be1eb92eaf8a3238baf4552098_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88cff6be1eb92eaf8a3238baf4552098_JaffaCakes118
-
Size
99KB
-
MD5
88cff6be1eb92eaf8a3238baf4552098
-
SHA1
d81adc495463890a59f4ecd059a3b12747d18a66
-
SHA256
c00f4d51355076174f1bd5db184d4f1910168e22f22d616ec9286012be5b705c
-
SHA512
6ec78910d71d03f5f7c0a040af0e9bb148d51cbc78180142a7b695e33216b38bf1e2511f3a3f7ee9d18513d88001d0c211f4ce5f1be0afa258f08aae47557fa2
-
SSDEEP
3072:sGRHIb92Jvu0EPk5z1u4cKkVwokdPZZua1:bI92df5o4cjVRk1Lv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88cff6be1eb92eaf8a3238baf4552098_JaffaCakes118
Files
-
88cff6be1eb92eaf8a3238baf4552098_JaffaCakes118.exe windows:4 windows x86 arch:x86
6977471da740e11c3ec93f5d069f3920
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetMapMode
SelectObject
RectVisible
GetTextMetricsA
SetStretchBltMode
RestoreDC
CreateSolidBrush
DeleteObject
SaveDC
GetPixel
LineTo
CreateCompatibleDC
SetTextAlign
GetDeviceCaps
DeleteDC
GetObjectA
GetClipBox
GetNearestPaletteIndex
GetStockObject
SelectPalette
CreatePalette
SetTextColor
PatBlt
CreatePen
CreateFontIndirectA
kernel32
lstrlenA
GetCurrentProcessId
DeleteFileA
GetCommandLineW
lstrcmpiW
lstrcmpiA
GetModuleHandleA
GetCurrentProcess
QueryPerformanceCounter
CopyFileA
RemoveDirectoryA
GetCurrentThreadId
GetModuleHandleW
DeleteFileW
RemoveDirectoryW
lstrcmpA
GetTickCount
GetCommandLineA
GetCurrentThread
IsDebuggerPresent
SetCurrentDirectoryA
GetWindowsDirectoryA
GetDriveTypeA
ExitProcess
GetStartupInfoA
GetACP
MulDiv
GetProcessHeap
GlobalFindAtomW
GetThreadLocale
GetUserDefaultLangID
GetOEMCP
GlobalFindAtomA
lstrlenW
GetVersion
GetConsoleOutputCP
VirtualAlloc
user32
GetParent
TranslateMessage
GetDC
GetSystemMetrics
CharNextA
GetDesktopWindow
glu32
gluQuadricCallback
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE