Static task
static1
Behavioral task
behavioral1
Sample
ce2ef89e5f640aea9a72847347887065_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce2ef89e5f640aea9a72847347887065_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce2ef89e5f640aea9a72847347887065_JaffaCakes118
-
Size
430KB
-
MD5
ce2ef89e5f640aea9a72847347887065
-
SHA1
8564b894d0c374ff08dbe350e94befa0a42e1dae
-
SHA256
baaa92e26a6a21c99cef4aadb197c207e80fdd13bdd012b1e9939ee6f0680bc1
-
SHA512
828ca8c8985a4710a4797b3a6066b7441932ec9c93323eb532bb1d0af55fb24c2ca1db75818edfb9ba78d2a84188c1058610d8c9578ab926672ec157344bda8c
-
SSDEEP
12288:vXP7BqK4kOZEULlGjfX2xnLto9A+4GKBhP:vf7N4k4LkQC9cGKBN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce2ef89e5f640aea9a72847347887065_JaffaCakes118
Files
-
ce2ef89e5f640aea9a72847347887065_JaffaCakes118.exe windows:4 windows x86 arch:x86
dac98f489bb68ccc92035873f8650aab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreatePenIndirect
GetBoundsRect
GdiGetBatchLimit
AngleArc
SetBkMode
GetPixel
GetMapMode
GdiSetBatchLimit
EnumFontFamiliesExA
ExtCreatePen
msvcrt
_wperror
_heapused
asin
wcstok
__CxxFrameHandler
__p__wenviron
ldiv
_mbsncpy
strcoll
fread
_fstat
_wexecve
_finite
_wutime
_wchdir
_mbsrchr
user32
GetShellWindow
ShowCaret
DlgDirSelectExA
DrawStateW
HiliteMenuItem
SetForegroundWindow
ChangeDisplaySettingsA
SetCursor
GetDlgCtrlID
kernel32
VirtualFree
ReadFile
lstrcmpiA
Sleep
SetFileTime
BuildCommDCBA
FatalAppExitA
SetConsoleScreenBufferSize
GetSystemTime
lstrcmpiW
lstrlenA
lstrcmpW
GetFileTime
GetComputerNameA
SetComputerNameW
lstrlenW
GetTimeFormatA
GetNumberFormatA
GetDiskFreeSpaceW
ExitProcess
GlobalMemoryStatus
VirtualFree
GetStdHandle
GetModuleHandleA
GetModuleHandleW
SetCommState
lstrcmpA
VirtualAlloc
CreateDirectoryExW
EnumDateFormatsW
ResetWriteWatch
GetStartupInfoW
GetLocalTime
Sections
.text Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vce Size: 164KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oilk Size: 227KB - Virtual size: 575KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.guxv Size: 33KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ