Static task
static1
Behavioral task
behavioral1
Sample
fda1580a4836c06365fcfda347ad3773_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fda1580a4836c06365fcfda347ad3773_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fda1580a4836c06365fcfda347ad3773_JaffaCakes118
-
Size
118KB
-
MD5
fda1580a4836c06365fcfda347ad3773
-
SHA1
8dbb7c620029c7213ab8686d60e8feeaa125c3fc
-
SHA256
16237a41a305cb9eef7a9cc050b0422cc9018cd7a9618e8e935aa1f52df2d9c4
-
SHA512
6a43c2aae26dea66a2b9060287bcf866de6f335daccb9904492ae22bc83908d9fe397f4df64320f19e74f60c274478a13ccf692b98fc916ad30eb6b53319f31e
-
SSDEEP
3072:jE4fzqKvdCYckg2MXj5MdrbvtPv3z9MltPR5ReJ:deKVCYZq8v9vxEt9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fda1580a4836c06365fcfda347ad3773_JaffaCakes118
Files
-
fda1580a4836c06365fcfda347ad3773_JaffaCakes118.exe windows:5 windows x86 arch:x86
76a5d7046503b1784673d127142b01f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
QueryPerformanceCounter
lstrlenW
GetModuleHandleA
lstrcmpiA
GetCommandLineA
GlobalFindAtomA
DeleteFileA
CopyFileA
lstrcmpiW
lstrlenA
RemoveDirectoryA
RemoveDirectoryW
FindClose
GetWindowsDirectoryA
VirtualAlloc
VirtualFree
gdi32
SelectPalette
CreateSolidBrush
GetStockObject
CreatePalette
SetStretchBltMode
RectVisible
GetClipBox
GetObjectA
CreateFontIndirectA
SaveDC
CreateCompatibleDC
LineTo
DeleteDC
GetDeviceCaps
RestoreDC
DeleteObject
SetTextAlign
SelectObject
GetTextMetricsA
GetPixel
user32
GetDesktopWindow
GetParent
GetSystemMetrics
TranslateMessage
CharNextA
GetDC
glu32
gluNurbsCallback
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ