Static task
static1
Behavioral task
behavioral1
Sample
b07d5251af19d5d39152a3e0482bc451_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b07d5251af19d5d39152a3e0482bc451_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b07d5251af19d5d39152a3e0482bc451_JaffaCakes118
-
Size
113KB
-
MD5
b07d5251af19d5d39152a3e0482bc451
-
SHA1
735da7f4b1c459794f6d5ab667854a97285a7d64
-
SHA256
14cb7de56ad3fabece1b968ff56102f69862313f201af68c8f5ac147db893337
-
SHA512
425b6a20d4fe17fae4bbe9e8fb87944bd8a33ec73ff8913d35df79b269648af25b158365898948430c4b8c264fa3e6fbe4b3f093bd9b40cf46338c29e38bd59d
-
SSDEEP
1536:AXkRvCwC19Zk9BPd8uRjl+Pj4o4EGDtNTZkkcpvlVguD+umBtWYjgtd3i6K8tqwz:ACvCwMuB+but/fivG/JjQ5qwuDId
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b07d5251af19d5d39152a3e0482bc451_JaffaCakes118
Files
-
b07d5251af19d5d39152a3e0482bc451_JaffaCakes118.exe windows:4 windows x86 arch:x86
33c3fde5df2f3cfed4ffc2b17c8df954
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDesktopWindow
GetParent
GetSystemMetrics
TranslateMessage
CharNextA
GetDC
gdi32
CreatePalette
SetTextAlign
SetMapMode
GetClipBox
GetPixel
RestoreDC
RectVisible
SetTextColor
SelectPalette
SelectObject
GetObjectA
DeleteDC
GetTextMetricsA
CreateFontIndirectA
SetStretchBltMode
SaveDC
GetStockObject
LineTo
CreateSolidBrush
DeleteObject
kernel32
GetModuleHandleA
GetWindowsDirectoryA
RemoveDirectoryA
GetSystemTime
lstrlenW
lstrcmpiA
VirtualAlloc
DeleteFileA
lstrlenA
QueryPerformanceCounter
VirtualFree
CopyFileA
GetCommandLineA
lstrcmpA
RemoveDirectoryW
FindClose
lstrcmpiW
GlobalFindAtomA
glu32
gluNurbsCallback
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ