Static task
static1
Behavioral task
behavioral1
Sample
b9d32db31e2bc1af38dfbf41ae41bdf2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b9d32db31e2bc1af38dfbf41ae41bdf2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9d32db31e2bc1af38dfbf41ae41bdf2_JaffaCakes118
-
Size
115KB
-
MD5
b9d32db31e2bc1af38dfbf41ae41bdf2
-
SHA1
703f2fe142e809e242ec6c18c81eff9144cf000c
-
SHA256
06d2208c6336e058903e71b9ad03d0390589a3d3545e996b00e9f936fce85597
-
SHA512
08aea6e6ca345074a29414724c4470cdbe1002f45507961c930de73111fccd11753b55ce85858fa4de91b3fce9303dde60c40f01bfbc5f6af6822c36a2a18e03
-
SSDEEP
3072:6ewXnS2nTeXInGq+XhezyFrJVFhaUKHYwVvXMwa5t0Ka52m:0X7Tm2bzyFrJVFhaUK4wVvcwa5t0Ka5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9d32db31e2bc1af38dfbf41ae41bdf2_JaffaCakes118
Files
-
b9d32db31e2bc1af38dfbf41ae41bdf2_JaffaCakes118.exe windows:5 windows x86 arch:x86
2d89aa570a6646918af078ce96749e1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextMetricsA
LineTo
GetClipBox
SetStretchBltMode
GetDeviceCaps
DeleteDC
CreateCompatibleDC
SetMapMode
RectVisible
DeleteObject
GetStockObject
SelectPalette
GetObjectA
CreateSolidBrush
SetTextColor
GetPixel
SelectObject
CreatePalette
SetTextAlign
CreateFontIndirectA
RestoreDC
SetPixel
PatBlt
CreatePen
kernel32
RemoveDirectoryA
MulDiv
GetACP
GetOEMCP
lstrcmpA
lstrcmpiW
SetCurrentDirectoryA
GetCommandLineW
GetTickCount
GlobalFindAtomW
GetCurrentThread
GlobalFindAtomA
DeleteFileA
GetVersion
GetDriveTypeA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
lstrlenA
VirtualAlloc
GetCurrentProcess
GetModuleHandleA
VirtualFree
lstrcmpiA
GetStartupInfoA
IsDebuggerPresent
lstrlenW
GetWindowsDirectoryA
GetConsoleOutputCP
QueryPerformanceCounter
RemoveDirectoryW
CopyFileA
GetThreadLocale
GetUserDefaultLangID
GetProcessHeap
DeleteFileW
GetCommandLineA
user32
CharNextA
GetParent
GetDesktopWindow
GetSystemMetrics
TranslateMessage
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ