Static task
static1
Behavioral task
behavioral1
Sample
dbba5345a718467323a9ac8e8d2504b4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dbba5345a718467323a9ac8e8d2504b4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbba5345a718467323a9ac8e8d2504b4_JaffaCakes118
-
Size
166KB
-
MD5
dbba5345a718467323a9ac8e8d2504b4
-
SHA1
492d2a89846f52fe52e046259d93670705507e43
-
SHA256
0c2e626e8540f92a78d34302ab52edc5fc1e0a0952ccbc82a06e23e3f80d3f3d
-
SHA512
59158b9b16191f8139794cc9c2176f0612675de8477d50b64757dac23876b8948de4d955f2852e86eaab9878717a89b047779ec36cdab99d947e48dd16f0196a
-
SSDEEP
3072:v/aUGGwvfKU2nlvHQ28LESLWZScc0tCIyU544:v/aUzwl2Bv8LEh28
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbba5345a718467323a9ac8e8d2504b4_JaffaCakes118
Files
-
dbba5345a718467323a9ac8e8d2504b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
58abbe5cf253eb82c4ad26bbbb591f9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreatePen
SetTextColor
GetPixel
SetTextAlign
GetObjectA
GetDeviceCaps
SetStretchBltMode
CreateSolidBrush
SetMapMode
GetStockObject
SelectPalette
RectVisible
RestoreDC
CreateFontIndirectA
PatBlt
LineTo
SaveDC
CreateCompatibleDC
SelectObject
CreatePalette
DeleteObject
GetTextMetricsA
GetClipBox
DeleteDC
kernel32
CopyFileA
RemoveDirectoryA
GetProcessHeap
GetThreadLocale
GetModuleHandleA
GetCurrentProcess
MulDiv
QueryPerformanceCounter
GetStartupInfoA
lstrlenW
GetDriveTypeA
GetVersion
GetUserDefaultLangID
IsDebuggerPresent
lstrlenA
GetCommandLineA
lstrcmpiW
GetCurrentThreadId
SetCurrentDirectoryA
GetOEMCP
GetConsoleOutputCP
GetACP
lstrcmpiA
GetCurrentThread
GetModuleHandleW
GetTickCount
GetCommandLineW
lstrcmpA
DeleteFileW
VirtualAlloc
VirtualFree
DeleteFileA
GetWindowsDirectoryA
GlobalFindAtomA
GlobalFindAtomW
GetCurrentProcessId
user32
GetSystemMetrics
GetParent
TranslateMessage
GetDC
GetDesktopWindow
CharNextA
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Xara, Qs Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Ikmpscsu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ