Static task
static1
Behavioral task
behavioral1
Sample
d4a1032bb8c8f389886c8ffe4930fa48_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4a1032bb8c8f389886c8ffe4930fa48_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4a1032bb8c8f389886c8ffe4930fa48_JaffaCakes118
-
Size
209KB
-
MD5
d4a1032bb8c8f389886c8ffe4930fa48
-
SHA1
c22da8b2363c43b15e713057b5704524f755ad87
-
SHA256
ff0c2103436e3a385bf2e01574456562c458dd8ee7ae94a68c8b2dca37ce734a
-
SHA512
4623d7a24b05845e3858b92cb7b42a5dac854ab275f755f2f44cde917689d629229eb1b46053d26c08e954af732a37bb5b09c0a19f1f2514bdbf9cd0721bd61f
-
SSDEEP
6144:VSCncK/mzqzqg2pMI+plXEqQWABLDaQG1g:V9zmzW23+pKqBAtDaQG1g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4a1032bb8c8f389886c8ffe4930fa48_JaffaCakes118
Files
-
d4a1032bb8c8f389886c8ffe4930fa48_JaffaCakes118.exe windows:4 windows x86 arch:x86
61b3a59b0f8b7a3cbb9e21a030711a77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateMetaFileW
EnumMetaFile
ExtEscape
FillPath
GetClipRgn
GetObjectType
GetWinMetaFileBits
GetWindowOrgEx
LineDDA
OffsetViewportOrgEx
RectVisible
SetDIBColorTable
SetMapMode
SetRectRgn
StretchDIBits
StrokePath
user32
DrawFrameControl
DrawIcon
EndPaint
EnumWindows
EqualRect
GetClassNameA
GetDCEx
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyState
GetMenuStringA
GetScrollInfo
GetSubMenu
GetTopWindow
InflateRect
InsertMenuItemA
IsIconic
IsWindowEnabled
LoadCursorA
MapWindowPoints
MessageBeep
ReleaseDC
SetFocus
SetPropA
SetScrollInfo
WaitMessage
kernel32
GetFileSize
GetSystemTime
GlobalFindAtomA
HeapFree
HeapSize
InterlockedCompareExchange
IsBadCodePtr
LoadResource
MultiByteToWideChar
ResetEvent
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BzQAvX8g Size: 2KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ