Static task
static1
Behavioral task
behavioral1
Sample
fc398a58a17eb2b571f02e0c90ec30ce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fc398a58a17eb2b571f02e0c90ec30ce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc398a58a17eb2b571f02e0c90ec30ce_JaffaCakes118
-
Size
111KB
-
MD5
fc398a58a17eb2b571f02e0c90ec30ce
-
SHA1
f039c798c2bd081a3c48dfeedb702498073b43ed
-
SHA256
0e59e70f3070ec9a4e8e6c391c9ff3acc731837b3facb5713a8e668c913b2cae
-
SHA512
0d2c716e667c4de406a82c2f93c1f1817d77a5f7c9cd4d3f494286279e273f1137be3b3e7d9425e3e721dcc9c29469f6c70355c3d35227f46cf2a5b0f9e3bc88
-
SSDEEP
1536:8950OZOqkqoXPanVg7UioeDGF5I+U1tjBvI5KlY/bz+iPWtiWFlB:GNOco/aVdky61rvuKC/bCYWoGX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc398a58a17eb2b571f02e0c90ec30ce_JaffaCakes118
Files
-
fc398a58a17eb2b571f02e0c90ec30ce_JaffaCakes118.exe windows:5 windows x86 arch:x86
88159aab7cee03c8b26c67ed8515834c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetStretchBltMode
SelectObject
SetTextAlign
GetDeviceCaps
RectVisible
CreatePen
GetPixel
DeleteObject
PatBlt
GetTextMetricsA
LineTo
SetPixel
GetObjectA
SetMapMode
CreateFontIndirectA
SaveDC
SelectPalette
CreateCompatibleDC
DeleteDC
SetTextColor
GetStockObject
GetClipBox
CreateSolidBrush
CreatePalette
RestoreDC
kernel32
IsDebuggerPresent
GetACP
SetCurrentDirectoryA
CopyFileA
MulDiv
lstrlenW
GetProcessHeap
GetUserDefaultLangID
GetCommandLineA
RemoveDirectoryW
GetModuleHandleA
DeleteFileW
GetCurrentProcess
GetWindowsDirectoryA
GetOEMCP
GetDriveTypeA
GetCurrentProcessId
GlobalFindAtomA
GetConsoleOutputCP
GlobalFindAtomW
lstrlenA
GetStartupInfoA
lstrcmpiA
QueryPerformanceCounter
GetTickCount
GetThreadLocale
DeleteFileA
lstrcmpiW
GetCommandLineW
GetModuleHandleW
RemoveDirectoryA
lstrcmpA
GetCurrentThread
GetCurrentThreadId
VirtualAlloc
VirtualFree
user32
GetDesktopWindow
TranslateMessage
GetSystemMetrics
CharNextA
GetParent
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ