Static task
static1
Behavioral task
behavioral1
Sample
ae2bd582ae2da83e6755610ae9e67ee0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ae2bd582ae2da83e6755610ae9e67ee0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae2bd582ae2da83e6755610ae9e67ee0_JaffaCakes118
-
Size
167KB
-
MD5
ae2bd582ae2da83e6755610ae9e67ee0
-
SHA1
695f630d07e280882a0ec9eeef786970f2493b2d
-
SHA256
4565acb97edcb415b77c2830116d6565439b07ea434bd6a907e1f5a20bcaa145
-
SHA512
4d4c011dc1759c3943eed73c5f18d807f4a8f24357d32177624bd5cecd75fecd8a9864f0cca5acb0152aed7f1be63b2904d50b87531aa507dd597e189543a620
-
SSDEEP
3072:96iEk78niC/KPVOznEfzKKE+cybwl2AW+AX518uCL:sTBTY8zGRcybwk+J1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae2bd582ae2da83e6755610ae9e67ee0_JaffaCakes118
Files
-
ae2bd582ae2da83e6755610ae9e67ee0_JaffaCakes118.exe windows:4 windows x86 arch:x86
60da6e8e49728572644bce80213a1c25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetObjectA
CreateSolidBrush
SetMapMode
SelectObject
SetStretchBltMode
PatBlt
CreatePalette
GetTextMetricsA
CreateFontIndirectA
RestoreDC
DeleteDC
GetPixel
CreatePen
DeleteObject
GetStockObject
SelectPalette
GetClipBox
CreateCompatibleDC
SetTextColor
LineTo
SetTextAlign
RectVisible
SaveDC
kernel32
GetCommandLineW
GetConsoleOutputCP
GetCurrentThread
lstrcmpiA
IsDebuggerPresent
GetUserDefaultLangID
GetModuleHandleW
QueryPerformanceCounter
SetCurrentDirectoryA
GetOEMCP
GetDriveTypeA
GetCurrentProcessId
GetWindowsDirectoryA
GetACP
GetCommandLineA
DeleteFileW
GlobalFindAtomW
GetStartupInfoA
lstrcmpA
DeleteFileA
RemoveDirectoryA
GetTickCount
lstrlenW
CopyFileA
GlobalFindAtomA
GetCurrentProcess
GetThreadLocale
GetVersion
lstrcmpiW
GetCurrentThreadId
GetModuleHandleA
GetProcessHeap
MulDiv
VirtualAlloc
VirtualFree
user32
GetDC
CharNextA
TranslateMessage
GetSystemMetrics
GetDesktopWindow
GetParent
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Daagxi W Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Hglixx N Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE