Static task
static1
Behavioral task
behavioral1
Sample
fd0ed9920d27b052b223be323fb92537_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd0ed9920d27b052b223be323fb92537_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd0ed9920d27b052b223be323fb92537_JaffaCakes118
-
Size
37KB
-
MD5
fd0ed9920d27b052b223be323fb92537
-
SHA1
53bc0a25198bf369b169fce560c4fdbe26aed132
-
SHA256
3d95356278c8e8a2e0a0d619410418411204bf32519dc0f5e709846fd83db7e6
-
SHA512
7a6cab8b553e2c57cb538bf13a16ceffce807f9eab003b68fca908ca08b8cd5077f96ef94f9ae144edabf87ef169db4b9ad58c0c0653e2e75d068ccea4603385
-
SSDEEP
768:U4W/RM68iE+Ur8ugw/lQxEW9gE8DvCfAgGjPFlCasZNv1:U41zirUgkUESd8DvCfAgGjPFlCT/v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd0ed9920d27b052b223be323fb92537_JaffaCakes118
Files
-
fd0ed9920d27b052b223be323fb92537_JaffaCakes118.exe windows:4 windows x86 arch:x86
8007433fdca8180c24e4b2573e3b2002
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlFindMostSignificantBit
user32
SetDebugErrorLevel
GetSysColorBrush
ole32
CoImpersonateClient
OleSave
gdi32
GetTextColor
PatBlt
PathToRegion
PaintRgn
RemoveFontMemResourceEx
SetICMProfileA
InvertRgn
GetRandomRgn
StrokePath
StartDocW
CreateBitmap
CreateHatchBrush
CreateRoundRectRgn
EnableEUDC
FrameRgn
GetClipRgn
GetFontData
GetLayout
GetTextAlign
SetTextCharacterExtra
comctl32
ShowHideMenuCtl
activeds
ADsBuildEnumerator
rasapi32
RasGetConnectStatusW
shell32
SHGetFileInfoW
SHFindFiles
dsprop
PostADsPropSheet
oleacc
AccessibleObjectFromPoint
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ