Static task
static1
Behavioral task
behavioral1
Sample
b144345a60e839f33ce9af00c1f5047d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b144345a60e839f33ce9af00c1f5047d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b144345a60e839f33ce9af00c1f5047d_JaffaCakes118
-
Size
128KB
-
MD5
b144345a60e839f33ce9af00c1f5047d
-
SHA1
f6c84e79c8ff32a88ef98dcf7fc6a91ef789657f
-
SHA256
998f28b870155bdc3398182427cc112a32f643d1444d5b4b28a1c9f7a753dc28
-
SHA512
f55fa5ff0bb53e170e4beb28bdcf84667e05c4a9731abf704cd2c45c526abe3a252d5600cc9b9b92bfde2dca620aeafd9e3a78dd211ce219b1ae8fcb21068ebb
-
SSDEEP
3072:t5QgrHNBuogncZpkGYSQZmyLe8x8/U7nV+GqnfskJuuvdpD:3PfuorZpkGYSQZmyLW87nV+Gqnf04pD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b144345a60e839f33ce9af00c1f5047d_JaffaCakes118
Files
-
b144345a60e839f33ce9af00c1f5047d_JaffaCakes118.exe windows:5 windows x86 arch:x86
2b3cb0425a3161ad8b0e47e480efdb40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
RemoveDirectoryA
GetModuleHandleW
GetProcessHeap
GetCommandLineW
CopyFileA
lstrcmpiA
MulDiv
GetStartupInfoA
GetCurrentProcess
GetConsoleOutputCP
GetUserDefaultLangID
GetACP
QueryPerformanceCounter
GetCommandLineA
GetTickCount
GetOEMCP
GetModuleHandleA
GlobalFindAtomA
GetCurrentThreadId
SetCurrentDirectoryA
DeleteFileW
lstrlenW
GlobalFindAtomW
IsDebuggerPresent
GetThreadLocale
GetCurrentProcessId
GetVersion
GetWindowsDirectoryA
GetCurrentThread
lstrcmpiW
RemoveDirectoryW
GetDriveTypeA
DeleteFileA
VirtualAlloc
VirtualFree
gdi32
CreatePalette
CreateFontIndirectA
LineTo
PatBlt
SetMapMode
DeleteDC
CreateSolidBrush
SaveDC
SelectPalette
CreateCompatibleDC
GetStockObject
DeleteObject
GetObjectA
SetTextColor
GetClipBox
GetPixel
RectVisible
CreatePen
SetStretchBltMode
SetTextAlign
SelectObject
RestoreDC
SetPixel
GetTextMetricsA
GetDeviceCaps
user32
CharNextA
TranslateMessage
GetSystemMetrics
GetDesktopWindow
GetParent
glu32
gluQuadricCallback
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ