Static task
static1
Behavioral task
behavioral1
Sample
09b22d72310e69790b511ece123d156c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
09b22d72310e69790b511ece123d156c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
09b22d72310e69790b511ece123d156c_JaffaCakes118
-
Size
134KB
-
MD5
09b22d72310e69790b511ece123d156c
-
SHA1
92714b4478d4aa45bd55c4f5f12b3c02970e1360
-
SHA256
e78daeb411ebb6a961c2249cb298e29dfc8b8e0b0de158a0d0433d7cec3e81ac
-
SHA512
3ee16fb541e6f56dbee50fa55be2e38da79e7e951293d611cbb8b438a266ebe9b5636d99075852a3288e48ea37ac7bb48edf54aee76c838f71132974ef336d8a
-
SSDEEP
3072:KgaKy8O47ngpVsIdn5/rKl9Bp/cC0chWgOReT:Kgaj47wVvnq9D10MORe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09b22d72310e69790b511ece123d156c_JaffaCakes118
Files
-
09b22d72310e69790b511ece123d156c_JaffaCakes118.exe windows:4 windows x86 arch:x86
630d1e982fcf214b099466bcbb4f7f31
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDCOrgEx
SetWindowExtEx
BeginPath
SetDIBColorTable
EndPath
LPtoDP
SetBkColor
SetBrushOrgEx
PtVisible
SaveDC
CreatePen
OffsetViewportOrgEx
CreateCompatibleBitmap
SetMapMode
IntersectClipRect
Chord
SetStretchBltMode
GetEnhMetaFilePaletteEntries
GetPaletteEntries
RectVisible
ScaleViewportExtEx
SelectObject
MaskBlt
LineTo
SetTextColor
GetDIBColorTable
GetDeviceCaps
SelectPalette
SetROP2
RestoreDC
SelectClipPath
Rectangle
EndPage
GetCharWidth32A
StartPage
StretchBlt
PatBlt
SetBkMode
SetViewportOrgEx
GetBrushOrgEx
ExcludeClipRect
DeleteObject
EndDoc
CreatePatternBrush
BitBlt
GetPixel
PlayEnhMetaFile
CreateBitmap
UnrealizeObject
MoveToEx
CreateRectRgn
DeleteDC
kernel32
GetTickCount
GetLastError
GlobalFindAtomA
GetModuleHandleW
SetCurrentDirectoryA
GetCurrentThread
RemoveDirectoryA
GetCurrentProcess
lstrlenW
GetACP
GetOEMCP
DeleteFileW
CopyFileA
GetVersion
GetModuleHandleA
GlobalFindAtomW
GetCommandLineA
GetProcessHeap
GetCurrentProcessId
lstrcmpA
lstrcmpiW
DeleteFileA
GetCurrentThreadId
GetThreadLocale
IsDebuggerPresent
GetCommandLineW
SetLastError
lstrcmpiA
GetUserDefaultLangID
GetConsoleOutputCP
lstrlenA
MulDiv
VirtualAlloc
user32
CharNextA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ