Static task
static1
Behavioral task
behavioral1
Sample
ac462bfff8b2c65ec76f5221b5a5f8bf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac462bfff8b2c65ec76f5221b5a5f8bf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac462bfff8b2c65ec76f5221b5a5f8bf_JaffaCakes118
-
Size
112KB
-
MD5
ac462bfff8b2c65ec76f5221b5a5f8bf
-
SHA1
7707115ac01caa70c74cba03e2a53d1944d9f243
-
SHA256
ad9de3c66af4d16aa47230e3591c8681598eccc7166e29b5e0b1ef523bc46a84
-
SHA512
bc8b3292f90bbc9193b70ca332a947651592aa95239e8b4a5d57d029c9ac60a8542fb7141627ecab1eb1b87e2f5f6989734e2ae82aa4a156181a11593cc3d9de
-
SSDEEP
3072:4I4/zuMFVc4QdBgstdOThO1gGC59Ym6TIb8gXa1:4I4/3+ntQOS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac462bfff8b2c65ec76f5221b5a5f8bf_JaffaCakes118
Files
-
ac462bfff8b2c65ec76f5221b5a5f8bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
8a5e1c8ee30f54606ba8aab9f5a82038
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateSolidBrush
CreateFontIndirectA
SetMapMode
GetPixel
SetStretchBltMode
DeleteDC
LineTo
GetDeviceCaps
SelectObject
SetTextAlign
SelectPalette
GetStockObject
GetObjectA
GetClipBox
DeleteObject
RectVisible
GetTextMetricsA
SetTextColor
RestoreDC
CreateCompatibleDC
SaveDC
CreatePalette
kernel32
lstrcmpiW
VirtualAlloc
RemoveDirectoryA
lstrlenA
DeleteFileA
GlobalFindAtomA
QueryPerformanceCounter
GetModuleHandleA
GetSystemTime
lstrcmpiA
VirtualFree
CopyFileA
GetCommandLineA
GetWindowsDirectoryA
lstrcmpA
lstrlenW
RemoveDirectoryW
FindClose
user32
GetParent
CharNextA
TranslateMessage
GetDesktopWindow
GetDC
GetSystemMetrics
glu32
gluNurbsCallback
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ