Static task
static1
Behavioral task
behavioral1
Sample
b87cece5fc2afb5757e6c7ebee6b01c5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b87cece5fc2afb5757e6c7ebee6b01c5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b87cece5fc2afb5757e6c7ebee6b01c5_JaffaCakes118
-
Size
102KB
-
MD5
b87cece5fc2afb5757e6c7ebee6b01c5
-
SHA1
b1516616f7e00c59456e719298549c539ebf7f80
-
SHA256
d603eb4b48e5c251327667b4d417a2e5dd9175fefb9519076d07102f4f8d0fe6
-
SHA512
f2f94c27d0c820a32fe9a0bc7bcf92cc1bd4d1f0a81b464fdd01f6c3a18443d9a582c77e7c1fdebeaae6909ca885f805ab1919f762da28c0492b4435db05fda8
-
SSDEEP
1536:sFi3dJfNdbe2CENbyb+rfvYVzgJc/rlkeAz7wveaI1a23iuE54WHsE0OHa:sFit1NNLbu6DLc8wvjJHJ0OH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b87cece5fc2afb5757e6c7ebee6b01c5_JaffaCakes118
Files
-
b87cece5fc2afb5757e6c7ebee6b01c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
739e90a24e6a4b05b757105f481211c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetTextColor
GetTextMetricsA
SaveDC
DeleteDC
GetDeviceCaps
SetMapMode
SelectObject
CreateSolidBrush
DeleteObject
CreateFontIndirectA
RectVisible
GetPixel
CreateCompatibleDC
GetClipBox
GetObjectA
SetTextAlign
CreatePalette
RestoreDC
kernel32
GetModuleHandleA
RemoveDirectoryA
GetWindowsDirectoryA
GlobalFindAtomA
GetCommandLineA
lstrcmpiA
lstrlenW
lstrcmpA
CopyFileA
QueryPerformanceCounter
DeleteFileA
RemoveDirectoryW
FindClose
lstrlenA
GetSystemTime
lstrcmpiW
VirtualAlloc
VirtualFree
user32
GetDC
GetSystemMetrics
GetParent
TranslateMessage
CharNextA
GetDesktopWindow
glu32
gluNurbsCallback
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ