Static task
static1
Behavioral task
behavioral1
Sample
bec412ea443498583cb7e47fb6db6564_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bec412ea443498583cb7e47fb6db6564_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bec412ea443498583cb7e47fb6db6564_JaffaCakes118
-
Size
212KB
-
MD5
bec412ea443498583cb7e47fb6db6564
-
SHA1
d45a0f57e70d3ec951e88b7c63d100d105cb1158
-
SHA256
2968e3870ce0995af5c49649e22bc2e4d852db9bd4c6b78f7cb04fbfcadaddfe
-
SHA512
93f29b98a1d3a957fed679d5143fba2694a5e5a115e905be4c466685418159c5878f0f827c6ff671981748a0292ba2bd3356367cf71da0c171e37dc6c20d2d8d
-
SSDEEP
6144:OoeONFq4LcgbMrBxwsd1CaH9ySYsbTQxB:feqcgg9JCnSYsbUxB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bec412ea443498583cb7e47fb6db6564_JaffaCakes118
Files
-
bec412ea443498583cb7e47fb6db6564_JaffaCakes118.exe windows:4 windows x86 arch:x86
2dfe84c33482a40ce9c3f695f343862e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
BeginPath
EndPage
GetBitmapBits
GetMapMode
GetRegionData
PolylineTo
SetColorAdjustment
SetPolyFillMode
SetStretchBltMode
SetViewportExtEx
SetWindowOrgEx
StrokePath
TextOutA
user32
DrawMenuBar
EndPaint
FindWindowA
GetKeyState
GetKeyboardType
GetSystemMenu
IntersectRect
RegisterWindowMessageA
SetWindowLongA
TrackPopupMenu
kernel32
CompareStringW
DeviceIoControl
FindClose
FindNextFileW
FormatMessageA
FreeEnvironmentStringsW
GetCPInfo
GetFileSize
GetUserDefaultLCID
GlobalFree
GlobalHandle
GlobalUnlock
InterlockedIncrement
LoadLibraryA
ReleaseMutex
SetHandleCount
SetLastError
UnhandledExceptionFilter
WriteConsoleA
WriteFile
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ