Static task
static1
Behavioral task
behavioral1
Sample
034ffa2e09b27c360336fe0023d2e77f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
034ffa2e09b27c360336fe0023d2e77f_JaffaCakes118
-
Size
282KB
-
MD5
034ffa2e09b27c360336fe0023d2e77f
-
SHA1
bc29fd668aae668954a6d2749be1bb51bb1dbc7a
-
SHA256
d99220f17ae2c4445d4f8be6a1ddef2bd73ae549fae5ed57f624ef043777a260
-
SHA512
c863a370ecf27cf6a7bfc9279b1b446cf3c8622def0de1fe6ae9e9540bc211cfb3d1d6799cdf1d44d3fd9e087b51d990bb38222588e613247c202661e373449e
-
SSDEEP
3072:Eketmy0RM1YDGwyq3rPWENoKDFdctIuT6iyzbiAc9N21oc0:wmy1YYq7u6GVT2bix9Nwo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 034ffa2e09b27c360336fe0023d2e77f_JaffaCakes118
Files
-
034ffa2e09b27c360336fe0023d2e77f_JaffaCakes118.exe windows:4 windows x86 arch:x86
8148a7c7493eb3b521af365b4e0a9534
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SelectObject
DeleteDC
SetTextAlign
GetDeviceCaps
GetPixel
MoveToEx
CreateSolidBrush
kernel32
GetTickCount
lstrcmpiW
QueryPerformanceCounter
GetUserDefaultLangID
DeleteFileW
VirtualAlloc
VirtualFree
user32
ShowWindow
CharNextA
glu32
gluTessCallback
comctl32
InitCommonControls
Sections
.text Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Xjycro O Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 57KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tzidmfe Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
orjmflv Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xinixvz Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE