Static task
static1
Behavioral task
behavioral1
Sample
bdf4c8d1f891d7d4fb079be82491cd9d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bdf4c8d1f891d7d4fb079be82491cd9d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdf4c8d1f891d7d4fb079be82491cd9d_JaffaCakes118
-
Size
114KB
-
MD5
bdf4c8d1f891d7d4fb079be82491cd9d
-
SHA1
51276d8c02345a5bdea4f2a41b258370f1586445
-
SHA256
d58dd02c39b882d71796ae06863581ba89ec66d7d86d47f8892807058aa866b6
-
SHA512
4917794aa43ed0a638f0f755797431d7c1ca99185fb807527d91535f25f05c267d44f6872841684f5b096e8c907b1cf2f5cef43d74a1644b000675c1f91a5974
-
SSDEEP
1536:qqTOftg1ciF7lnIuW3Cjp9/Ht/LNEWmEQW0fcanC+uIyg08iSd:qqTOf4FVNIuW3O/LNEwaO8H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdf4c8d1f891d7d4fb079be82491cd9d_JaffaCakes118
Files
-
bdf4c8d1f891d7d4fb079be82491cd9d_JaffaCakes118.exe windows:4 windows x86 arch:x86
814e201146ab795c66eadf706c0d5d47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDesktopWindow
GetParent
TranslateMessage
CharNextA
GetSystemMetrics
gdi32
GetStockObject
CreatePen
SetStretchBltMode
SelectObject
GetDeviceCaps
RestoreDC
SetTextColor
CreateCompatibleDC
PatBlt
GetPixel
LineTo
DeleteObject
CreateSolidBrush
GetClipBox
RectVisible
CreatePalette
SelectPalette
SetMapMode
SetTextAlign
SaveDC
CreateFontIndirectA
GetTextMetricsA
DeleteDC
GetObjectA
SetPixel
kernel32
GetCurrentProcess
GetProcessHeap
GetCurrentThreadId
RemoveDirectoryA
MulDiv
lstrcmpiW
GetOEMCP
lstrlenW
GetModuleHandleA
lstrlenA
GetVersion
GetCurrentThread
GetTickCount
GlobalFindAtomA
QueryPerformanceCounter
GetConsoleOutputCP
CopyFileA
GetStartupInfoA
GetCurrentProcessId
GlobalFindAtomW
GetModuleHandleW
DeleteFileW
GetWindowsDirectoryA
lstrcmpiA
GetACP
GetThreadLocale
SetCurrentDirectoryA
GetCommandLineA
DeleteFileA
IsDebuggerPresent
GetDriveTypeA
lstrcmpA
GetCommandLineW
RemoveDirectoryW
VirtualAlloc
VirtualFree
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ