Static task
static1
Behavioral task
behavioral1
Sample
a1cc45f6fb8cd408c1ad99b9d4087304_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a1cc45f6fb8cd408c1ad99b9d4087304_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1cc45f6fb8cd408c1ad99b9d4087304_JaffaCakes118
-
Size
114KB
-
MD5
a1cc45f6fb8cd408c1ad99b9d4087304
-
SHA1
90a8135536f74214ae072a12b53f8a8a32701197
-
SHA256
dab88a0fac59dab02b30bbc0c38313855fb9d0c9c5254bba9d564e4511a1ac81
-
SHA512
9820adc73b6d1b84033e121e57ae0f4fe9d3a487295e0c8df9cd3f5edb6ecd919221518462a3a350a7dc89fef7e9a297de16b0bd0283beac3c849bb516f50e36
-
SSDEEP
3072:9E1y4DWqX3+rAFVRdTnWVdcbqXxy9U92:ky4DfX2A7WVdcY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1cc45f6fb8cd408c1ad99b9d4087304_JaffaCakes118
Files
-
a1cc45f6fb8cd408c1ad99b9d4087304_JaffaCakes118.exe windows:5 windows x86 arch:x86
2a4e1eb93bc4674d0293f53c2a83dec0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
lstrcmpiW
lstrcmpA
lstrcmpiA
GetWindowsDirectoryA
lstrlenW
GlobalFindAtomA
RemoveDirectoryA
DeleteFileA
VirtualAlloc
GetCommandLineA
VirtualFree
QueryPerformanceCounter
CopyFileA
RemoveDirectoryW
FindClose
lstrlenA
GetModuleHandleA
gdi32
GetObjectA
CreateCompatibleDC
GetDeviceCaps
GetTextMetricsA
DeleteObject
DeleteDC
SetTextColor
RectVisible
SetTextAlign
CreatePalette
SetMapMode
CreateFontIndirectA
SelectObject
CreateSolidBrush
SelectPalette
RestoreDC
LineTo
GetPixel
GetClipBox
user32
GetDC
GetSystemMetrics
GetParent
GetDesktopWindow
CharNextA
TranslateMessage
glu32
gluNurbsCallback
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ