Static task
static1
Behavioral task
behavioral1
Sample
d036fa4cea7c8aa8d8112f51ec495ff5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d036fa4cea7c8aa8d8112f51ec495ff5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d036fa4cea7c8aa8d8112f51ec495ff5_JaffaCakes118
-
Size
113KB
-
MD5
d036fa4cea7c8aa8d8112f51ec495ff5
-
SHA1
10c3a31d6589d2452c3bc322091990d33d7865e9
-
SHA256
baf36ddebc2c903031bb8ba801aec159b0a5eeb57a95e86382c37cdd01f16afd
-
SHA512
5095b306d5f6ab847dbd984e09a576ae4a1d7dbca13ca3ffae158e6945636de61648a88386c8ad672f3f47d4017a568c7c5f4b944d152f72e394ebb0ef2392ad
-
SSDEEP
1536:IA5wO9nRLnTv/L+C+aLDtqUqkFR5HhfWB01NaI4llBjuGoHBF+uvfPKa3EMpf7vQ:jtFnzPLDtqUqkFhmWqNpMRvt5v6JmL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d036fa4cea7c8aa8d8112f51ec495ff5_JaffaCakes118
Files
-
d036fa4cea7c8aa8d8112f51ec495ff5_JaffaCakes118.exe windows:4 windows x86 arch:x86
14190c319156180f9d1db83a751b7d0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RectVisible
DeleteObject
RestoreDC
CreateCompatibleDC
SetTextAlign
CreatePen
PatBlt
GetStockObject
SelectObject
CreatePalette
SetMapMode
SelectPalette
SaveDC
SetStretchBltMode
SetTextColor
SetPixel
DeleteDC
CreateSolidBrush
LineTo
GetDeviceCaps
GetObjectA
GetTextMetricsA
CreateFontIndirectA
GetClipBox
GetPixel
user32
GetParent
GetDesktopWindow
CharNextA
GetSystemMetrics
TranslateMessage
kernel32
DeleteFileW
GlobalFindAtomW
GetModuleHandleA
GetCommandLineW
GetOEMCP
GetTickCount
CopyFileA
lstrlenA
GetCurrentProcess
GetProcessHeap
GetConsoleOutputCP
MulDiv
GetACP
GetCurrentThreadId
RemoveDirectoryA
IsDebuggerPresent
RemoveDirectoryW
lstrcmpiW
GetDriveTypeA
lstrcmpA
SetCurrentDirectoryA
GetCurrentThread
QueryPerformanceCounter
GetStartupInfoA
GetCommandLineA
lstrcmpiA
GetCurrentProcessId
GetVersion
GetUserDefaultLangID
GlobalFindAtomA
GetThreadLocale
DeleteFileA
lstrlenW
VirtualAlloc
VirtualFree
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ