Static task
static1
Behavioral task
behavioral1
Sample
b2e2c2e444d2ef7b3bbc0f7ef65c811c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2e2c2e444d2ef7b3bbc0f7ef65c811c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2e2c2e444d2ef7b3bbc0f7ef65c811c_JaffaCakes118
-
Size
113KB
-
MD5
b2e2c2e444d2ef7b3bbc0f7ef65c811c
-
SHA1
f014222b9218f6da1b0889462acbd8dda32c1458
-
SHA256
c8e701afd65503cecd00e4e3b14bfa856e740fbb25225255354d3f5b856e085f
-
SHA512
7700b19a98beabaadb9082452d80c6f27cd0d1ecb52d34238b4f4a62b60b6a3f4451ea7c0119f085c88fd9e535e1637424d805995e9984eaac343c9c6565b024
-
SSDEEP
1536:mhaC4V8W8inzqXEXY7y5o9A1pr66etdgzDEfTKvVHD58TYeMA4oDSYyK1LfpJAVV:mhaC4CRZ7ymuheHKNtiAoDSxKzpqpl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2e2c2e444d2ef7b3bbc0f7ef65c811c_JaffaCakes118
Files
-
b2e2c2e444d2ef7b3bbc0f7ef65c811c_JaffaCakes118.exe windows:5 windows x86 arch:x86
ff06e45b1e3c487997d113826fd05b20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharNextA
GetSystemMetrics
GetDesktopWindow
GetParent
TranslateMessage
kernel32
MulDiv
GetCurrentThreadId
GetDriveTypeA
SetCurrentDirectoryA
lstrcmpiA
RemoveDirectoryA
lstrlenW
GetUserDefaultLangID
GetACP
CopyFileA
GlobalFindAtomW
GetThreadLocale
GlobalFindAtomA
GetStartupInfoA
IsDebuggerPresent
GetCurrentProcessId
GetConsoleOutputCP
DeleteFileA
GetCurrentThread
GetOEMCP
QueryPerformanceCounter
GetVersion
GetTickCount
DeleteFileW
GetCurrentProcess
lstrcmpA
GetCommandLineA
lstrcmpiW
GetWindowsDirectoryA
GetModuleHandleW
GetModuleHandleA
GetProcessHeap
lstrlenA
GetCommandLineW
RemoveDirectoryW
VirtualAlloc
VirtualFree
gdi32
GetObjectA
SelectPalette
GetPixel
LineTo
DeleteDC
DeleteObject
CreatePalette
SaveDC
SetTextAlign
SetMapMode
PatBlt
GetDeviceCaps
GetTextMetricsA
RectVisible
SetStretchBltMode
CreateFontIndirectA
CreateCompatibleDC
SetTextColor
GetStockObject
CreatePen
RestoreDC
CreateSolidBrush
SelectObject
GetClipBox
SetPixel
glu32
gluQuadricCallback
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ