Static task
static1
Behavioral task
behavioral1
Sample
e0aca9cd3e105f09d79194c1ca381c95_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e0aca9cd3e105f09d79194c1ca381c95_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0aca9cd3e105f09d79194c1ca381c95_JaffaCakes118
-
Size
109KB
-
MD5
e0aca9cd3e105f09d79194c1ca381c95
-
SHA1
a31488caf90a17bcfb771af123e5d8752b769c82
-
SHA256
b093ec3e9a861c832cd5c97325705299c548b956ed6246552d0e8ff3d258b997
-
SHA512
d6909398339029a604f09911908d5f7131b4d0ed54f703c34c5fc8918a4f8c75d3d226a19bf99acda0b1af78811c2f92a14386ada4678b3cc7c406e5bc94919a
-
SSDEEP
3072:LChMjE+hhpLf/BpnB4EtWkWo9MbzHzzvJv:+hMjEQ/DBhgkWo9MbzP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0aca9cd3e105f09d79194c1ca381c95_JaffaCakes118
Files
-
e0aca9cd3e105f09d79194c1ca381c95_JaffaCakes118.exe windows:4 windows x86 arch:x86
890427a9002cad558038b86a88767fb7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
lstrcmpA
lstrlenA
lstrcmpiW
GetSystemTime
lstrlenW
lstrcmpiA
GetCommandLineA
GetWindowsDirectoryA
VirtualAlloc
GetModuleHandleA
VirtualFree
GlobalFindAtomA
CopyFileA
RemoveDirectoryW
FindClose
QueryPerformanceCounter
DeleteFileA
gdi32
SaveDC
SetTextColor
DeleteDC
DeleteObject
LineTo
GetDeviceCaps
GetTextMetricsA
CreateCompatibleDC
SetStretchBltMode
CreateSolidBrush
RectVisible
SetMapMode
GetStockObject
RestoreDC
CreateFontIndirectA
SelectObject
SetTextAlign
GetClipBox
GetPixel
SelectPalette
user32
CharNextA
GetDesktopWindow
GetParent
GetSystemMetrics
GetDC
TranslateMessage
glu32
gluNurbsCallback
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ