Static task
static1
Behavioral task
behavioral1
Sample
a3961c66771f7ea6b4ced797850fc5a2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a3961c66771f7ea6b4ced797850fc5a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3961c66771f7ea6b4ced797850fc5a2_JaffaCakes118
-
Size
169KB
-
MD5
a3961c66771f7ea6b4ced797850fc5a2
-
SHA1
17e0be782aee91fc4005134fb9db1002475dee3c
-
SHA256
426b393c7906547dfd409bf9eb8bea44ff774f120a181416a8bc42f4627a2bc1
-
SHA512
27c44e0dd7dabe5c3cd230b13d4d0afaead28ec0f63a88a7628ef70df4e4d8b03f7edc53ae525380fb428ab0aa6c34373a8a981287543aa4bd0536e7023a63db
-
SSDEEP
3072:Gpsj1zJmxCNlCFM9MIPAu38EeV8jsjlYIFBOXuH:jptsvo0cAld
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3961c66771f7ea6b4ced797850fc5a2_JaffaCakes118
Files
-
a3961c66771f7ea6b4ced797850fc5a2_JaffaCakes118.exe windows:5 windows x86 arch:x86
d1fe481a2e3b3eababa6058a7a7d0c3c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
RemoveDirectoryA
GetOEMCP
lstrcmpA
GetCommandLineW
GlobalFindAtomW
GetStartupInfoA
GetCurrentProcessId
CopyFileA
DeleteFileW
GetCurrentThread
GetUserDefaultLangID
GetVersion
GetDriveTypeA
GlobalFindAtomA
SetCurrentDirectoryA
GetWindowsDirectoryA
QueryPerformanceCounter
VirtualAlloc
IsDebuggerPresent
GetThreadLocale
VirtualFree
GetACP
lstrcmpiW
GetConsoleOutputCP
GetModuleHandleA
lstrcmpiA
MulDiv
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
lstrlenA
lstrlenW
GetModuleHandleW
GetCurrentProcess
GetTickCount
gdi32
GetPixel
SelectObject
CreatePen
CreateSolidBrush
GetTextMetricsA
PatBlt
RestoreDC
SetStretchBltMode
SetTextColor
SelectPalette
RectVisible
SetTextAlign
GetObjectA
GetClipBox
CreatePalette
LineTo
CreateCompatibleDC
GetDeviceCaps
SetMapMode
SaveDC
DeleteObject
CreateFontIndirectA
GetStockObject
user32
TranslateMessage
GetDesktopWindow
GetDC
CharNextA
GetParent
GetSystemMetrics
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Gioeqdug Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Voycujfj Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ