Static task
static1
Behavioral task
behavioral1
Sample
ff44f9465065dee74447ff924c6783f0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff44f9465065dee74447ff924c6783f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff44f9465065dee74447ff924c6783f0_JaffaCakes118
-
Size
167KB
-
MD5
ff44f9465065dee74447ff924c6783f0
-
SHA1
7760603d9cdd3cef657ade59dc225c99b395dc1d
-
SHA256
5b66ebaa3ce5206c5d5638692f7eff47a93c530248aecf4309e1088c667f7201
-
SHA512
bcd826a79da45f68e9924d3f7a717770a528cce62455fb394aa866890dc4c15fb9b62b205251aa0f78d5a534d2f6ebf4c53d070ebf260842ecc61bc74a8d633d
-
SSDEEP
3072:9tZFC2tVII+ohl+oibzKNJQdboGowGYuVTmhQXToEhBUxzN:1FC1IzPNJQdboauQ8Ta
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff44f9465065dee74447ff924c6783f0_JaffaCakes118
Files
-
ff44f9465065dee74447ff924c6783f0_JaffaCakes118.exe windows:5 windows x86 arch:x86
c521a86be6c17a84c9179a1bf2461b51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SaveDC
SetMapMode
CreateSolidBrush
LineTo
SelectObject
CreateFontIndirectA
GetObjectA
RectVisible
CreateCompatibleDC
GetTextMetricsA
SetStretchBltMode
GetStockObject
SetTextAlign
SelectPalette
RestoreDC
DeleteObject
GetPixel
CreatePen
PatBlt
SetTextColor
GetDeviceCaps
DeleteDC
CreatePalette
GetClipBox
kernel32
lstrcmpiW
QueryPerformanceCounter
GetVersion
GetDriveTypeA
GetOEMCP
DeleteFileA
GlobalFindAtomA
GetWindowsDirectoryA
SetCurrentDirectoryA
GetACP
lstrlenW
GetThreadLocale
GetCurrentProcessId
GetCurrentThread
CopyFileA
GetCommandLineA
GetTickCount
GetProcessHeap
DeleteFileW
GetCurrentProcess
GetConsoleOutputCP
RemoveDirectoryA
GetStartupInfoA
GetUserDefaultLangID
lstrcmpiA
GetCurrentThreadId
lstrcmpA
MulDiv
lstrlenA
IsDebuggerPresent
GetCommandLineW
GetModuleHandleW
GetModuleHandleA
VirtualAlloc
VirtualFree
user32
CharNextA
GetParent
GetDesktopWindow
GetDC
GetSystemMetrics
TranslateMessage
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Licuartl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Glgwpksv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ