Static task
static1
Behavioral task
behavioral1
Sample
bcc51f3310d1cda30eeaf38e1291f76b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bcc51f3310d1cda30eeaf38e1291f76b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcc51f3310d1cda30eeaf38e1291f76b_JaffaCakes118
-
Size
168KB
-
MD5
bcc51f3310d1cda30eeaf38e1291f76b
-
SHA1
968c85107965fec3fa9a8e5db825ac3544c46535
-
SHA256
7fb177ee5426bed5ff8bc92e9abd880d685f94a13e0272a77bbb542b0fde77be
-
SHA512
1500b8f8ccf9330136d30ea2e80f4ed7d0520332c34eb43292d7517c5b51da52d41d418190abfa0c40b346336067691a794a2c10a8e4c1595dedb28ec43c5a37
-
SSDEEP
3072:bqNury6GageVzklBGGRViZIHlbbo4gSKZbVUMwAnOv6eyrLOfn:bqwO6lVzklBGGVHovnOv6O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcc51f3310d1cda30eeaf38e1291f76b_JaffaCakes118
Files
-
bcc51f3310d1cda30eeaf38e1291f76b_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f728d5824fec417e6c156deb167f924
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteDC
GetTextMetricsA
GetPixel
GetObjectA
RectVisible
SaveDC
CreatePalette
CreateFontIndirectA
RestoreDC
CreatePen
CreateCompatibleDC
SelectObject
GetDeviceCaps
GetClipBox
CreateSolidBrush
LineTo
GetStockObject
SetTextColor
SelectPalette
SetTextAlign
DeleteObject
SetStretchBltMode
PatBlt
SetMapMode
kernel32
RemoveDirectoryA
GetUserDefaultLangID
GetModuleHandleW
GetCurrentProcessId
MulDiv
GetStartupInfoA
GetCurrentProcess
GetTickCount
GetWindowsDirectoryA
CopyFileA
lstrcmpiA
GetCommandLineA
GetOEMCP
GetModuleHandleA
IsDebuggerPresent
GlobalFindAtomA
lstrlenA
GetVersion
GetACP
GetDriveTypeA
GetCurrentThreadId
SetCurrentDirectoryA
GetProcessHeap
GetThreadLocale
GetCurrentThread
GetCommandLineW
GetConsoleOutputCP
lstrcmpiW
DeleteFileA
DeleteFileW
QueryPerformanceCounter
GlobalFindAtomW
VirtualAlloc
lstrlenW
VirtualFree
user32
CharNextA
GetDC
TranslateMessage
GetSystemMetrics
GetDesktopWindow
GetParent
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Xgqmhehe Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Ieaycjnt Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ