Static task
static1
Behavioral task
behavioral1
Sample
b91c8cde95e6f075fb825faf8b026d0b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b91c8cde95e6f075fb825faf8b026d0b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b91c8cde95e6f075fb825faf8b026d0b_JaffaCakes118
-
Size
93KB
-
MD5
b91c8cde95e6f075fb825faf8b026d0b
-
SHA1
241e086ab98674ae16321b40a1294c0fe5066797
-
SHA256
ecf53f99e91cd5e21f111b7bbda25f2a2b6cc910798b6cf88928b5e990d1ddd0
-
SHA512
4b4c40ef48563558f70b4d30a160700dd8811b334e73642380c33d47aba74200c50a1039233bf98f07c6f81da4d542c5f920691bf31b13f1343a861c28a791dd
-
SSDEEP
1536:yafkreF+tYFN+SBP92953LKUCG80FeOfGveOEA04UyuDkOy87cj/qQPOeBVQ2LH+:ya8r1dSx92T3LKUCG8keObO30B9DkTuf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b91c8cde95e6f075fb825faf8b026d0b_JaffaCakes118
Files
-
b91c8cde95e6f075fb825faf8b026d0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
2df7eff4955dcaf3e05224d1862e423b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteDC
GetObjectA
CreatePalette
SelectPalette
GetDeviceCaps
SetMapMode
CreatePen
PatBlt
SetTextColor
GetPixel
RestoreDC
LineTo
GetStockObject
SaveDC
GetClipBox
SetTextAlign
CreateCompatibleDC
RectVisible
CreateSolidBrush
CreateFontIndirectA
DeleteObject
GetNearestPaletteIndex
GetTextMetricsA
SelectObject
SetStretchBltMode
kernel32
GetWindowsDirectoryA
lstrlenW
GetStartupInfoA
IsDebuggerPresent
GetCommandLineW
lstrlenA
GetVersion
GetCurrentProcess
GetModuleHandleW
GetDriveTypeA
GetTickCount
GetCommandLineA
GetCurrentThreadId
GlobalFindAtomA
GetCurrentThread
GetModuleHandleA
GetThreadLocale
lstrcmpA
QueryPerformanceCounter
GetOEMCP
GetUserDefaultLangID
GetConsoleOutputCP
lstrcmpiW
SetCurrentDirectoryA
GetACP
RemoveDirectoryW
MulDiv
DeleteFileA
lstrcmpiA
ExitProcess
GetCurrentProcessId
CopyFileA
GetProcessHeap
GlobalFindAtomW
RemoveDirectoryA
DeleteFileW
VirtualAlloc
VirtualFree
user32
GetDC
GetDesktopWindow
GetParent
CharNextA
GetSystemMetrics
TranslateMessage
glu32
gluQuadricCallback
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ