Static task
static1
Behavioral task
behavioral1
Sample
955f53098852394765f205167046e653_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
955f53098852394765f205167046e653_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
955f53098852394765f205167046e653_JaffaCakes118
-
Size
27KB
-
MD5
955f53098852394765f205167046e653
-
SHA1
12cb4f2472145c1e0f017d5b0786acce76328b79
-
SHA256
f8fdc988d63923b2f0d9421af76aa32cd8c18bee408dac7f45a48bf5741e1ba8
-
SHA512
7213989605d8f977aff2947bb5b750bd47748453719cc06c9b6e8396524d3dccd1be109ec7d61fe9efcad7c3883c15ffd91c5e5c95d0c8cda305b52c608bf6b4
-
SSDEEP
384:fjuMQ5MrHUe21i/722CgvXpE+dzjEzJ/aNbJjC1C6h+rqCI1WbGbH1pBk:ffQve2Ivi+dzjcJ/afAmeWbGbbBk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 955f53098852394765f205167046e653_JaffaCakes118
Files
-
955f53098852394765f205167046e653_JaffaCakes118.exe windows:4 windows x86 arch:x86
70bca88dec7e668b7e1f9bb6ce0d2bf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
libgimpui-2.0-0
gimp_export_dialog_get_content_area
gimp_export_dialog_new
gimp_export_image
gimp_ui_init
libglib-2.0-0
g_ascii_table
g_file_error_from_errno
g_file_error_quark
g_free
g_log
g_malloc
g_open
g_set_error
g_strerror
libgobject-2.0-0
g_type_check_instance_cast
libgtk-win32-2.0-0
gtk_box_get_type
gtk_box_pack_start
gtk_container_get_type
gtk_container_set_border_width
gtk_widget_destroy
gtk_widget_show
libintl-8
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_gettext
libintl_sprintf
libintl_textdomain
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
_close
_read
_write
__getmainargs
__p___argc
__p___argv
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setjmp
_setmode
abort
atexit
atoi
calloc
ceil
free
fwrite
longjmp
signal
vfprintf
libgimp-2.0-0
gimp_drawable_detach
gimp_drawable_flush
gimp_drawable_get
gimp_drawable_has_alpha
gimp_drawable_type
gimp_image_delete
gimp_image_get_colormap
gimp_image_insert_layer
gimp_image_new
gimp_image_set_filename
gimp_install_procedure
gimp_layer_new
gimp_main
gimp_pixel_rgn_get_rect
gimp_pixel_rgn_init
gimp_pixel_rgn_set_rect
gimp_procedural_db_get_data
gimp_procedural_db_set_data
gimp_progress_init_printf
gimp_progress_update
gimp_register_file_handler_mime
gimp_register_magic_load_handler
gimp_register_save_handler
gimp_tile_height
libgimpbase-2.0-0
gimp_filename_to_utf8
gimp_locale_directory
libgimpwidgets-2.0-0
gimp_dialog_get_type
gimp_dialog_run
gimp_int_radio_group_new
gimp_radio_button_update
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 216B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE