Static task
static1
Behavioral task
behavioral1
Sample
b05ae52107be4d0e7aa4433cd3b14786_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b05ae52107be4d0e7aa4433cd3b14786_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b05ae52107be4d0e7aa4433cd3b14786_JaffaCakes118
-
Size
128KB
-
MD5
b05ae52107be4d0e7aa4433cd3b14786
-
SHA1
9e80ea482f338bcd7d26c24e248ab236519df260
-
SHA256
479af50a69866892230d115c07720559828a04453d257b01e497625e8e95477e
-
SHA512
cd90b77df05595b65775314d14208339640e5866549e341e0334a6f01660a5a774a7e3ccbcbbdfb70db244c5a251ab2ff6ab14878830b3503d7c8500d5ab6b7b
-
SSDEEP
3072:ObMqGEpnWE6N9UwO+Dq+gOyPyX1nVFLlN8d2Y+GJ0T:OAqOEytgCVs+Gm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b05ae52107be4d0e7aa4433cd3b14786_JaffaCakes118
Files
-
b05ae52107be4d0e7aa4433cd3b14786_JaffaCakes118.exe windows:4 windows x86 arch:x86
d166f5e2597edad432511056159f1933
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RestoreDC
SaveDC
GetClipBox
GetDeviceCaps
GetStockObject
CreateSolidBrush
SetTextAlign
CreateFontIndirectA
SetTextColor
GetTextMetricsA
RectVisible
CreatePalette
DeleteDC
SelectObject
GetPixel
CreateCompatibleDC
GetObjectA
SelectPalette
SetMapMode
kernel32
GetWindowsDirectoryA
lstrcmpiA
lstrlenW
lstrcmpA
GlobalFindAtomA
VirtualAlloc
RemoveDirectoryA
DeleteFileA
VirtualFree
lstrlenA
CopyFileA
GetModuleHandleA
GetCommandLineA
lstrcmpiW
GetSystemTime
RemoveDirectoryW
FindClose
user32
CharNextA
GetParent
GetDesktopWindow
GetDC
GetSystemMetrics
TranslateMessage
glu32
gluNurbsCallback
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE