Static task
static1
Behavioral task
behavioral1
Sample
0648b639bb29d96d4ab95843d5f9a879_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0648b639bb29d96d4ab95843d5f9a879_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0648b639bb29d96d4ab95843d5f9a879_JaffaCakes118
-
Size
304KB
-
MD5
0648b639bb29d96d4ab95843d5f9a879
-
SHA1
65e4f15274f806ed2c4bb2a7370d72274b5721ba
-
SHA256
b8ada496670283bfda4d65e7ab3aad1d0502f1233c6e5d9f58f1764feca4a866
-
SHA512
84e03a962464353208634f1f6d4d9ad8dd7ece622eb2ec070a0141c1f301891a2d6c3a02ff621baed3b13685cca9010f0c1fa1f0e22871108029cde260609943
-
SSDEEP
6144:TW2yx8Z55sp6JSp1fcgRFQFT/7+1r9JZxV6GLBmUuCDsi/SFo:TWx2Z5+AJSbcWWe1r/z2tiwo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0648b639bb29d96d4ab95843d5f9a879_JaffaCakes118
Files
-
0648b639bb29d96d4ab95843d5f9a879_JaffaCakes118.exe windows:3 windows x86 arch:x86
c6feea22682b8fcd7ac4b2b6a3a21348
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
UpdateWindow
CreateWindowExA
DispatchMessageA
ShowWindow
GetMessageA
DefWindowProcA
SendMessageA
TranslateMessage
RegisterClassExA
DestroyWindow
kernel32
HeapSize
GetModuleHandleW
CreateDirectoryW
InterlockedExchange
HeapAlloc
GetTempFileNameW
LoadLibraryW
lstrcmpiW
GetNumberFormatW
FileTimeToSystemTime
CloseHandle
GetDateFormatW
MulDiv
FindClose
SetEndOfFile
GlobalAlloc
GetProcessHeaps
UnhandledExceptionFilter
FileTimeToLocalFileTime
GetModuleHandleA
GetFileTime
QueryPerformanceCounter
IsDBCSLeadByte
GlobalReAlloc
SetUnhandledExceptionFilter
GetProcAddress
GlobalLock
VirtualFree
LoadLibraryA
GetProcessHeap
GetTempPathW
lstrcpynW
GetSystemTimeAsFileTime
VirtualAlloc
GetLastError
GetACP
FreeLibrary
GetLocaleInfoW
FindFirstFileW
RaiseException
GetTickCount
GetTimeFormatW
GetStartupInfoW
SetErrorMode
TerminateProcess
GlobalUnlock
lstrcpyW
lstrcatW
GlobalFree
GetCurrentProcessId
lstrcmpW
GetFileSize
gdi32
ResizePalette
RealizePalette
RestoreDC
SetPaletteEntries
StretchBlt
SetPixel
GetTextMetricsW
PlayMetaFile
GetNearestPaletteIndex
Rectangle
GetDIBColorTable
ExtTextOutW
CreateHalftonePalette
TextOutW
CreatePolygonRgn
GetDeviceCaps
SetDIBitsToDevice
MoveToEx
CreateRectRgnIndirect
PatBlt
TranslateCharsetInfo
SelectPalette
EnumFontFamiliesExW
SetROP2
DeleteDC
SetDIBColorTable
SetTextAlign
GetBkMode
CreatePatternBrush
PtVisible
CreateSolidBrush
CreateDIBitmap
LineTo
FillRgn
RoundRect
CreateDIBSection
PolyBezier
EnumFontFamiliesW
SaveDC
StretchDIBits
CreateCompatibleBitmap
SetBkMode
CreatePen
Escape
ExtFloodFill
Ellipse
GetTextExtentPoint32W
SetBkColor
GetTextColor
GetPixel
GetStockObject
CreateICW
UnrealizeObject
SetMapMode
SetStretchBltMode
SetDIBits
GetDIBits
OffsetRgn
SelectObject
Polyline
RectVisible
GetCurrentObject
GetPaletteEntries
msvcrt
wcscmp
wcschr
_itow
_beginthreadex
wcscat
rand
_wcsicmp
_except_handler3
exit
_onexit
_CxxThrowException
_c_exit
__wargv
_controlfp
_wcsdup
__p__commode
__p__fmode
_wsplitpath
_adjust_fdiv
_ltow
_wtoi
_getdcwd
_cexit
_XcptFilter
__set_app_type
_initterm
free
__setusermatherr
Sections
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ