Static task
static1
Behavioral task
behavioral1
Sample
ddcbeb8f018313cb7029373f07849ad1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddcbeb8f018313cb7029373f07849ad1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddcbeb8f018313cb7029373f07849ad1_JaffaCakes118
-
Size
171KB
-
MD5
ddcbeb8f018313cb7029373f07849ad1
-
SHA1
6064e0ad9a718bb85588a24ac1f1de2535f8b403
-
SHA256
c51bd45b56fa3dbf9746466ac638e1f153a5b924723504876cc3978c0da7b959
-
SHA512
5219b0e7dca241672666f95d7de0abdf6083287e8d4f2788497c558e148de3db9488b9b129875315398c705965646408963c9647dc226a26add5f217a51aad6c
-
SSDEEP
3072:Y8wo865qNdNGyN/lmRHxSzmdvjyTHzTE:JwoHYNGi/lmrSSd2Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddcbeb8f018313cb7029373f07849ad1_JaffaCakes118
Files
-
ddcbeb8f018313cb7029373f07849ad1_JaffaCakes118.exe windows:5 windows x86 arch:x86
f8807201a3a10fb35d1d56e48a52b141
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
lstrcmpiA
lstrlenW
GetModuleHandleA
lstrcmpA
IsDebuggerPresent
GetStartupInfoA
QueryPerformanceCounter
GetACP
lstrcmpiW
RemoveDirectoryA
GlobalFindAtomA
GetWindowsDirectoryA
GetProcessHeap
CopyFileA
GetCommandLineW
GetVersion
SetCurrentDirectoryA
GetCurrentProcessId
GetCommandLineA
GetTickCount
GlobalFindAtomW
GetCurrentProcess
GetThreadLocale
GetConsoleOutputCP
DeleteFileA
lstrlenA
GetDriveTypeA
GetCurrentThread
GetCurrentThreadId
GetUserDefaultLangID
VirtualAlloc
VirtualFree
GetOEMCP
GetModuleHandleW
gdi32
SelectPalette
CreateSolidBrush
SetMapMode
GetStockObject
LineTo
GetObjectA
RectVisible
CreateFontIndirectA
PatBlt
GetTextMetricsA
DeleteDC
CreatePen
SetTextAlign
CreateCompatibleDC
SelectObject
SetStretchBltMode
CreatePalette
GetPixel
RestoreDC
GetClipBox
SetTextColor
DeleteObject
SaveDC
GetDeviceCaps
user32
CharNextA
TranslateMessage
GetParent
GetSystemMetrics
GetDC
GetDesktopWindow
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Dselv Cn Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Wvpi, Nb Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ