Static task
static1
Behavioral task
behavioral1
Sample
02705af5b704bcee7538f78ab08c4f25_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02705af5b704bcee7538f78ab08c4f25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
02705af5b704bcee7538f78ab08c4f25_JaffaCakes118
-
Size
169KB
-
MD5
02705af5b704bcee7538f78ab08c4f25
-
SHA1
64a00cf5f354d04597332deeb066b3070933faba
-
SHA256
cc78be2647f1b16e242eece8414eafc829c3cb0b04fe0edbe39687c78c6c1b50
-
SHA512
097a550f24ea6839f6905231aa4cc17b781cecfbeb47c85ccc3de828777c898da778326fe4dbb1bd2be7a56562dea8fa70ee40033ffb95caabb37a65f6fd4eb3
-
SSDEEP
3072:tUtBb3oH9PaseRM6JAB3Ly+NwpMIEWDMGKK1RKFl:ikxTGMdLy0rWDMGKw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02705af5b704bcee7538f78ab08c4f25_JaffaCakes118
Files
-
02705af5b704bcee7538f78ab08c4f25_JaffaCakes118.exe windows:5 windows x86 arch:x86
aeb8512bd852359ee86ebde997cd49ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetCommandLineW
GetOEMCP
QueryPerformanceCounter
lstrcmpA
IsDebuggerPresent
GetProcessHeap
GetUserDefaultLangID
lstrcmpiW
DeleteFileW
GetCurrentThread
GetACP
lstrcmpiA
SetCurrentDirectoryA
GlobalFindAtomA
GetStartupInfoA
GlobalFindAtomW
GetWindowsDirectoryA
RemoveDirectoryA
lstrlenA
MulDiv
GetCommandLineA
VirtualAlloc
GetModuleHandleW
VirtualFree
CopyFileA
GetCurrentThreadId
lstrlenW
GetVersion
DeleteFileA
GetCurrentProcessId
GetCurrentProcess
GetDriveTypeA
GetTickCount
GetThreadLocale
GetConsoleOutputCP
user32
CharNextA
GetSystemMetrics
GetDC
TranslateMessage
GetParent
GetDesktopWindow
gdi32
LineTo
GetStockObject
DeleteDC
CreateSolidBrush
SetStretchBltMode
RectVisible
RestoreDC
GetPixel
GetObjectA
SelectPalette
PatBlt
SaveDC
CreatePalette
CreateFontIndirectA
GetTextMetricsA
DeleteObject
SetMapMode
SetTextColor
SetTextAlign
GetClipBox
GetDeviceCaps
SelectObject
CreatePen
CreateCompatibleDC
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Sbhjjw Y Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Sigidnts Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE