Static task
static1
Behavioral task
behavioral1
Sample
f58d61469db1658d27785c94bad1c2c8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f58d61469db1658d27785c94bad1c2c8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f58d61469db1658d27785c94bad1c2c8_JaffaCakes118
-
Size
149KB
-
MD5
f58d61469db1658d27785c94bad1c2c8
-
SHA1
a16378ef41f6563d14b333b9d156412999767e4e
-
SHA256
e9ea4b5a186cfcc5ccbf64cc25ae83e580047d6183ca3dd5002db15144f152b0
-
SHA512
658d035c2709995387f98b5c388efe9a0b09b923e5b22b1a31c60b71a512e13ec0d3274e28cad9e3f7a85e23381344203bb08b605bb5825dbd7c83e55fbd0f93
-
SSDEEP
3072:rp3YyRQ4VOXM7HayswZBnNFPCxFxGDUuguxDkdOe0:hny4VOXwHIwZhLkjUggu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f58d61469db1658d27785c94bad1c2c8_JaffaCakes118
Files
-
f58d61469db1658d27785c94bad1c2c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
dec3e68485192817b90de2de4e38e633
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
DispatchMessageA
TranslateMessage
GetDC
GetDesktopWindow
GetSystemMetrics
CharNextA
GetParent
kernel32
GetACP
CopyFileA
VirtualAlloc
lstrcmpiA
lstrlenA
VirtualFree
gdi32
GetStockObject
CreateSolidBrush
GetObjectA
GetClipBox
SetTextColor
CreateFontIndirectA
PatBlt
glu32
gluTessCallback
comctl32
InitCommonControls
Sections
.text Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Pwot. Re Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ