Static task
static1
Behavioral task
behavioral1
Sample
8b8db60dd17b0cf985695e18d1dcf4d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8b8db60dd17b0cf985695e18d1dcf4d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b8db60dd17b0cf985695e18d1dcf4d9_JaffaCakes118
-
Size
149KB
-
MD5
8b8db60dd17b0cf985695e18d1dcf4d9
-
SHA1
2a9cca848cac894d41f464033cb514cb763e84ac
-
SHA256
8078b548cea55102190a33b7dd6ebce46193f25768a2e73683cb82d805263a48
-
SHA512
791e2c1daa059c4cd8dc71e2b58f392f1cf6b1c65d457725dcd607181d8c61763ef5299b493f4824f58fec6906f3f96e5e88f36ece7afd56822fa8a966d7aa7f
-
SSDEEP
3072:G68hkQlylTXngzaTIuNCCsgYr5EwCpr/:G/kQAfNx+5EJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b8db60dd17b0cf985695e18d1dcf4d9_JaffaCakes118
Files
-
8b8db60dd17b0cf985695e18d1dcf4d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
a74cf47ef2e482e84eba32783ec0224c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFindAtomA
GetCurrentProcessId
CopyFileA
VirtualAlloc
VirtualFree
GetCurrentProcess
IsDebuggerPresent
GetUserDefaultLangID
DeleteFileW
gdi32
SetMapMode
DeleteObject
MoveToEx
CreatePalette
GetTextMetricsA
DeleteDC
user32
TranslateMessage
CharNextA
GetDC
GetDesktopWindow
glu32
gluTessCallback
comctl32
InitCommonControls
Sections
.text Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Sknvc Ng Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ