Static task
static1
Behavioral task
behavioral1
Sample
c04ffeb1aa32a489bc2e5fb7fb4a04d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c04ffeb1aa32a489bc2e5fb7fb4a04d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c04ffeb1aa32a489bc2e5fb7fb4a04d9_JaffaCakes118
-
Size
168KB
-
MD5
c04ffeb1aa32a489bc2e5fb7fb4a04d9
-
SHA1
ffcac6c9fa77a36dfebbd073472c00e39f10a281
-
SHA256
1c99f6489288a64a39999e86fd9f8d2fdfba7cdc6f9ba918209920b506696074
-
SHA512
1fbe90a4494e95b3ff641d3c842e2a51e246943ab6711b344b561dde6d61322374e1d30dc99ff235990be132668ef42ed9e9a2e9991e2a7fe5128ea918d405ab
-
SSDEEP
1536:iLfpU/wdF9GR4NPJc0jWGFHbKC08sO1gaD/o2soVn6j47gey/a/Ip7kc9UJdi03U:iLfkwdF4ixn9b68sEgS8xSwNFkTcwy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c04ffeb1aa32a489bc2e5fb7fb4a04d9_JaffaCakes118
Files
-
c04ffeb1aa32a489bc2e5fb7fb4a04d9_JaffaCakes118.exe windows:5 windows x86 arch:x86
a0d2f880ea87e9b0630d078497b4973f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
LineTo
SelectObject
GetDeviceCaps
DeleteObject
SelectPalette
GetPixel
RestoreDC
SetMapMode
DeleteDC
SetTextColor
CreatePalette
GetTextMetricsA
RectVisible
CreateCompatibleDC
SetStretchBltMode
GetClipBox
SaveDC
PatBlt
GetStockObject
SetTextAlign
CreateSolidBrush
GetObjectA
kernel32
GetCommandLineA
IsDebuggerPresent
GetACP
GetStartupInfoA
GetThreadLocale
lstrcmpiA
GlobalFindAtomW
lstrlenA
GetTickCount
GlobalFindAtomA
RemoveDirectoryA
GetConsoleOutputCP
DeleteFileW
GetCurrentProcessId
GetModuleHandleW
CopyFileA
GetCurrentProcess
lstrcmpA
GetCurrentThread
GetModuleHandleA
MulDiv
GetWindowsDirectoryA
GetDriveTypeA
GetOEMCP
lstrlenW
SetCurrentDirectoryA
GetUserDefaultLangID
GetCurrentThreadId
DeleteFileA
GetProcessHeap
QueryPerformanceCounter
GetVersion
lstrcmpiW
GetCommandLineW
VirtualAlloc
VirtualFree
user32
GetDesktopWindow
TranslateMessage
GetParent
CharNextA
GetDC
GetSystemMetrics
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Vkkywxgs Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Ldoxebdl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ