Static task
static1
Behavioral task
behavioral1
Sample
0f6c2e8e1d826873cc9102a22137905b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f6c2e8e1d826873cc9102a22137905b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f6c2e8e1d826873cc9102a22137905b_JaffaCakes118
-
Size
113KB
-
MD5
0f6c2e8e1d826873cc9102a22137905b
-
SHA1
b0d6b405bf0c1fb417eb0d2df506be28e0598a4e
-
SHA256
a98ba122bb764ddbb57bb409f77f52653a1935cd44b31506a70c11f55e5d1ddd
-
SHA512
0de23028e69fc2e4d9676750924a4432a714fadfcb758812c3df73603e47feb69179dac9007ac0974aa4d61bfdf1221c0f9168c0d524db3d4ef01c8c9a8d9b1d
-
SSDEEP
1536:yrkgqqCtrkAMwKZSYaKX/zg3nSdebpzHqazpMrq+V:+CRkAyzPrMSdetzvuq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f6c2e8e1d826873cc9102a22137905b_JaffaCakes118
Files
-
0f6c2e8e1d826873cc9102a22137905b_JaffaCakes118.exe windows:5 windows x86 arch:x86
e8fc8223a9bfbf4a4fb7da717aad0a5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
lstrcmpA
GetDriveTypeA
GetConsoleOutputCP
GetCommandLineW
GetVersion
GetTickCount
VirtualAlloc
IsDebuggerPresent
VirtualFree
GetCommandLineA
GetCurrentProcessId
lstrlenW
RemoveDirectoryA
lstrcmpiW
GetOEMCP
GetCurrentThread
GlobalFindAtomW
QueryPerformanceCounter
GetThreadLocale
GetUserDefaultLangID
lstrlenA
lstrcmpiA
GetModuleHandleW
CopyFileA
GetProcessHeap
GetModuleHandleA
GetACP
GetStartupInfoA
MulDiv
GetWindowsDirectoryA
GetCurrentProcess
GlobalFindAtomA
SetCurrentDirectoryA
DeleteFileW
DeleteFileA
RemoveDirectoryW
user32
GetDesktopWindow
GetSystemMetrics
GetParent
CharNextA
TranslateMessage
gdi32
CreateSolidBrush
SetTextColor
LineTo
DeleteObject
RectVisible
SaveDC
GetTextMetricsA
SetMapMode
CreatePen
GetObjectA
RestoreDC
PatBlt
CreateFontIndirectA
SelectPalette
SetTextAlign
CreateCompatibleDC
DeleteDC
GetPixel
SetStretchBltMode
GetDeviceCaps
GetClipBox
SelectObject
GetStockObject
SetPixel
CreatePalette
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ