Static task
static1
Behavioral task
behavioral1
Sample
8d62b32dca224dfb2be4be4ab471378d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8d62b32dca224dfb2be4be4ab471378d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d62b32dca224dfb2be4be4ab471378d_JaffaCakes118
-
Size
138KB
-
MD5
8d62b32dca224dfb2be4be4ab471378d
-
SHA1
f200f69ee1e9d1d3176e88b838158819b935d199
-
SHA256
746774787bdf74872bad7f699a85be7e4b13cd1d8b713a53e929cbc635df3012
-
SHA512
53f6e0dd7975e96372e869ec94c07583ad81c86ff12b6d82f45176e5965482eee2ffa96fbbfabc011b71b2ad1394bd517148b53f4c906ccc4cdd62d8e9d96c8c
-
SSDEEP
3072:WcHQnABgk3UvionDeoYtEiADnLJdpCAVJVSU2sthTB:WEQnxkO0bADLJjCAHV4sf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d62b32dca224dfb2be4be4ab471378d_JaffaCakes118
Files
-
8d62b32dca224dfb2be4be4ab471378d_JaffaCakes118.exe windows:4 windows x86 arch:x86
2d17c78d29bdaa8667bdb0126371580f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharNextA
gdi32
CreateBitmap
SetStretchBltMode
GetClipBox
DeleteObject
SetROP2
MoveToEx
PtVisible
SaveDC
LPtoDP
EndPage
UnrealizeObject
CreatePatternBrush
GetPixel
GetStockObject
SetWindowExtEx
SetBrushOrgEx
RestoreDC
GetBrushOrgEx
StretchBlt
SetBkColor
BitBlt
BeginPath
GetDeviceCaps
GetDCOrgEx
SelectPalette
EndDoc
PlayEnhMetaFile
DPtoLP
CreatePen
EndPath
GetPaletteEntries
SetTextColor
SetBkMode
StartPage
DeleteDC
SelectClipPath
SetColorSpace
Rectangle
GetTextMetricsA
LineTo
GetDIBColorTable
CreateCompatibleBitmap
GetEnhMetaFilePaletteEntries
CreateRectRgn
PatBlt
ScaleViewportExtEx
Chord
MaskBlt
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
SelectObject
ExcludeClipRect
IntersectClipRect
SetDIBColorTable
RectVisible
GetCharWidth32A
kernel32
GetCurrentProcessId
DeleteFileA
lstrlenA
GetModuleHandleA
GlobalFindAtomW
GetCurrentProcess
SetCurrentDirectoryA
GetOEMCP
GetConsoleOutputCP
DeleteFileW
GetACP
GetThreadLocale
RemoveDirectoryA
MulDiv
GetCurrentThreadId
lstrcmpiW
lstrlenW
GetCommandLineA
IsDebuggerPresent
GetTickCount
GetVersion
GetUserDefaultLangID
lstrcmpA
GetCommandLineW
CopyFileA
lstrcmpiA
GetLastError
VirtualAlloc
GetModuleHandleW
GetProcessHeap
GlobalFindAtomA
SetLastError
GetCurrentThread
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ