Static task
static1
Behavioral task
behavioral1
Sample
ddf5ff91a2d0798c29b0612abd5c1fd7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddf5ff91a2d0798c29b0612abd5c1fd7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddf5ff91a2d0798c29b0612abd5c1fd7_JaffaCakes118
-
Size
109KB
-
MD5
ddf5ff91a2d0798c29b0612abd5c1fd7
-
SHA1
3155b895554fc1a1f0ab14a05119065037c494bc
-
SHA256
69bf392d7295a5a557c93916934c90bff6a8a3233d1ca5aac6020b9d84517779
-
SHA512
1affa89a6f9f871bb30d8f962653cfe5ea7caae9dab094ea86d0fe94a58b1bc215c3b854eb669118a5d41328698e92b27802de80b1cc3cde85b83e92a0429351
-
SSDEEP
1536:Gk4PW9ViAn1m8+uxPhhr4sk6purN3mbZAvg4Dtqu7gjJu8XKiLELoDOSUKPo:GkaWPy8LxPhJkRNLJxyjJuEOSUKP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddf5ff91a2d0798c29b0612abd5c1fd7_JaffaCakes118
Files
-
ddf5ff91a2d0798c29b0612abd5c1fd7_JaffaCakes118.exe windows:4 windows x86 arch:x86
ca22de3acc1002e198d2a4e6d8b787ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateFontIndirectA
RectVisible
GetStockObject
CreatePalette
SetTextColor
SetStretchBltMode
LineTo
GetDeviceCaps
SetMapMode
GetTextMetricsA
GetClipBox
GetObjectA
CreateSolidBrush
DeleteObject
RestoreDC
SelectPalette
SetTextAlign
SelectObject
DeleteDC
CreateCompatibleDC
user32
TranslateMessage
GetDesktopWindow
GetParent
GetDC
GetSystemMetrics
CharNextA
kernel32
QueryPerformanceCounter
RemoveDirectoryA
lstrcmpA
GetSystemTime
DeleteFileA
GlobalFindAtomA
lstrcmpiW
CopyFileA
lstrcmpiA
lstrlenA
GetModuleHandleA
VirtualAlloc
GetWindowsDirectoryA
VirtualFree
RemoveDirectoryW
FindClose
GetCommandLineA
glu32
gluNurbsCallback
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ