Static task
static1
Behavioral task
behavioral1
Sample
db7e579d92e95c5c555441fabfb82e56_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db7e579d92e95c5c555441fabfb82e56_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db7e579d92e95c5c555441fabfb82e56_JaffaCakes118
-
Size
112KB
-
MD5
db7e579d92e95c5c555441fabfb82e56
-
SHA1
ee6701f75df96cdbad562d3f0a312f71b61a1e33
-
SHA256
9e19d3789e6cf26da20f28feb3a4fd764c715c0a4b99a4980f5df62d10e1852f
-
SHA512
73297c08f63d3c90a26221f4ab124f645b2b0bc38dd8de778159164136c748e6e758cd79ce55359f7517f67e0abd396a538f731bf1d57e37edf7864bbd9f68e5
-
SSDEEP
1536:PTjwe3zE402qqE6qSeikBCvI4Umzdd6Nl//Xx5mjIlOF7mqF:PTTwFT6qSa41oPxZOdmq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db7e579d92e95c5c555441fabfb82e56_JaffaCakes118
Files
-
db7e579d92e95c5c555441fabfb82e56_JaffaCakes118.exe windows:4 windows x86 arch:x86
9327823fa86e79624c53fa443a228f60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
lstrlenW
GetCurrentThread
lstrcmpA
GetCommandLineA
GlobalFindAtomA
RemoveDirectoryW
GetModuleHandleA
CopyFileA
lstrlenA
lstrcmpiW
GetVersion
GetCurrentProcessId
GetThreadLocale
GetWindowsDirectoryA
GetOEMCP
MulDiv
lstrcmpiA
GetACP
DeleteFileA
GetProcessHeap
GetDriveTypeA
GetCurrentProcess
GetCommandLineW
GetStartupInfoA
GetCurrentThreadId
DeleteFileW
SetCurrentDirectoryA
QueryPerformanceCounter
RemoveDirectoryA
IsDebuggerPresent
GetUserDefaultLangID
GetTickCount
GetConsoleOutputCP
GlobalFindAtomW
VirtualAlloc
VirtualFree
gdi32
CreateCompatibleDC
SelectPalette
SetTextAlign
CreateFontIndirectA
CreatePen
CreatePalette
SaveDC
GetTextMetricsA
LineTo
SetPixel
SelectObject
PatBlt
RectVisible
CreateSolidBrush
SetTextColor
RestoreDC
DeleteDC
GetStockObject
DeleteObject
GetClipBox
GetPixel
SetStretchBltMode
GetDeviceCaps
SetMapMode
GetObjectA
user32
CharNextA
TranslateMessage
GetParent
GetSystemMetrics
GetDesktopWindow
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ