Static task
static1
Behavioral task
behavioral1
Sample
df7df3a130a55ae5ac43cf35c8343694_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df7df3a130a55ae5ac43cf35c8343694_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df7df3a130a55ae5ac43cf35c8343694_JaffaCakes118
-
Size
31KB
-
MD5
df7df3a130a55ae5ac43cf35c8343694
-
SHA1
3fbd282341e2b1d94f72aad4ace0a0f7e7d988b6
-
SHA256
2dca2ece056dfa1d66b0231e307111fcc7840fc9b6d39492f8458b483d677eb1
-
SHA512
9f101380e95a62fd1298b2ca9bcb9d2fa358523410672fac3c19730439c5864881d5c27cd6bd940e966369962e91694a44f88df91501c015e2c91d15f9e87462
-
SSDEEP
384:+omSkw7GTW7Dflp0QxMn/+IJCSjf4SRQEji4iZVeuhC8XwSIgmQT6KJnYCrZ3:+omav/xfHQf4fEjiFUeA1KhqC1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df7df3a130a55ae5ac43cf35c8343694_JaffaCakes118
Files
-
df7df3a130a55ae5ac43cf35c8343694_JaffaCakes118.exe windows:4 windows x86 arch:x86
a5277978141acded47415ab5052c677a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
GetTempFileNameW
GlobalFindAtomA
GetCommandLineA
ExitProcess
GetStartupInfoA
user32
VkKeyScanA
PrivateExtractIconExA
ScrollWindowEx
SetMenuItemBitmaps
UnregisterDeviceNotification
MapVirtualKeyExW
gdi32
PATHOBJ_bEnumClipLines
GetGlyphIndicesW
GetRasterizerCaps
GetDCBrushColor
GetFontAssocStatus
GdiPlayEMF
GdiGetCodePage
OffsetRgn
SetDIBColorTable
GetTextMetricsW
CreateBitmapIndirect
OffsetRgn
PolyTextOutA
EngBitBlt
GdiFullscreenControl
EnumICMProfilesW
BRUSHOBJ_ulGetBrushColor
GdiPlayPrivatePageEMF
EngCreateClip
CopyMetaFileW
Sections
.text Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qqsgn Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE