Static task
static1
Behavioral task
behavioral1
Sample
d6d8e5cd59cad6f024d51950e2ed22cf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d6d8e5cd59cad6f024d51950e2ed22cf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6d8e5cd59cad6f024d51950e2ed22cf_JaffaCakes118
-
Size
136KB
-
MD5
d6d8e5cd59cad6f024d51950e2ed22cf
-
SHA1
3b5914f85a6c69b35271147f2a56c0b127398214
-
SHA256
159bb067558cadd0c594bc4b5b252c21d6fb5811b7c786e97b889c46f3eb9275
-
SHA512
63bf34eb238d7f9b74b1e89277199aefa0b0f8b6f2ac6a3fc6ea2a72531268a34fb79ba517e444b7733f25c81668e626616a79ca5d961f0b2b46d5a5128ec0a8
-
SSDEEP
3072:mrMTv8kInfNGbUSSmsChsC8WW/aUDRmIeVDiWVFT:xjPgRlWANlmVDiwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6d8e5cd59cad6f024d51950e2ed22cf_JaffaCakes118
Files
-
d6d8e5cd59cad6f024d51950e2ed22cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
83217b722d36f32ef6b638bc386f4e64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
lstrlenW
GetACP
GetTickCount
MulDiv
GetCommandLineA
IsDebuggerPresent
DeleteFileA
GetCommandLineW
VirtualAlloc
GetCurrentProcessId
RemoveDirectoryA
lstrcmpiW
GetCurrentThread
GetOEMCP
SetLastError
GetVersion
GetConsoleOutputCP
GetUserDefaultLangID
GetModuleHandleA
CopyFileA
GetThreadLocale
lstrcmpA
GetCurrentProcess
GetCurrentThreadId
GetProcessHeap
GetLastError
GlobalFindAtomA
lstrlenA
DeleteFileW
lstrcmpiA
SetCurrentDirectoryA
GlobalFindAtomW
gdi32
GetTextMetricsA
SetStretchBltMode
SetWindowExtEx
LineTo
SetMapMode
ScaleViewportExtEx
EndPage
IntersectClipRect
DeleteDC
DeleteObject
RectVisible
BitBlt
GetPixel
SetBkColor
StartPage
SetBrushOrgEx
EndPath
GetEnhMetaFilePaletteEntries
GetCharWidth32A
GetDeviceCaps
SelectClipPath
GetDCOrgEx
SelectObject
CreateCompatibleBitmap
PtVisible
UnrealizeObject
BeginPath
Chord
RestoreDC
StretchBlt
PatBlt
MaskBlt
GetStockObject
SetROP2
LPtoDP
PlayEnhMetaFile
GetPaletteEntries
DPtoLP
SetTextColor
EndDoc
SetColorSpace
SaveDC
CreatePen
MoveToEx
CreateRectRgn
SelectPalette
SetBkMode
CreatePatternBrush
GetClipBox
CreateBitmap
SetDIBColorTable
OffsetViewportOrgEx
GetDIBColorTable
user32
CharNextA
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ