Static task
static1
Behavioral task
behavioral1
Sample
b7ae27d34efad7a74b593ac25d9eb524_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b7ae27d34efad7a74b593ac25d9eb524_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7ae27d34efad7a74b593ac25d9eb524_JaffaCakes118
-
Size
111KB
-
MD5
b7ae27d34efad7a74b593ac25d9eb524
-
SHA1
787497b99534e7eee13c8caa8033c234ccf48e2f
-
SHA256
5b1664032e9ae63c7925efe36626549d43a6097bd10e84e63d0a93bfe330a3c3
-
SHA512
ab6ddde2dceee365f254b73153b6e556acfc8e27337904d9ae016331adcde153fb4045b759bcb9fa389e422302422cb275a6759c32024016a6c6ba9cb843c09e
-
SSDEEP
3072:BZrae8P4pDsE7AiiriUISUZkZ2CDA7ZUsd:z8q7AiiraeDDA7V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7ae27d34efad7a74b593ac25d9eb524_JaffaCakes118
Files
-
b7ae27d34efad7a74b593ac25d9eb524_JaffaCakes118.exe windows:4 windows x86 arch:x86
15704ab1a8142bc3657d6537b929b2c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateFontIndirectA
LineTo
SetTextAlign
GetTextMetricsA
GetObjectA
RectVisible
SetStretchBltMode
DeleteObject
SelectPalette
SaveDC
GetPixel
SetTextColor
RestoreDC
GetStockObject
GetDeviceCaps
SelectObject
GetClipBox
CreateCompatibleDC
PatBlt
SetMapMode
CreatePalette
CreatePen
DeleteDC
CreateSolidBrush
SetPixel
user32
TranslateMessage
GetParent
GetSystemMetrics
GetDesktopWindow
CharNextA
kernel32
GetWindowsDirectoryA
GetCurrentProcess
GetCommandLineA
RemoveDirectoryA
GetCommandLineW
IsDebuggerPresent
SetCurrentDirectoryA
CopyFileA
GetVersion
QueryPerformanceCounter
MulDiv
GlobalFindAtomW
VirtualAlloc
VirtualFree
lstrlenW
GetStartupInfoA
GetCurrentThreadId
GetACP
GetConsoleOutputCP
GetProcessHeap
GetModuleHandleW
GlobalFindAtomA
DeleteFileA
GetOEMCP
lstrcmpiW
GetCurrentThread
GetTickCount
GetDriveTypeA
GetCurrentProcessId
DeleteFileW
GetThreadLocale
RemoveDirectoryW
GetUserDefaultLangID
lstrcmpiA
lstrlenA
GetModuleHandleA
glu32
gluQuadricCallback
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ