Static task
static1
Behavioral task
behavioral1
Sample
113b999da0bbcfd8ebbf3b21bee42fdf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
113b999da0bbcfd8ebbf3b21bee42fdf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
113b999da0bbcfd8ebbf3b21bee42fdf_JaffaCakes118
-
Size
165KB
-
MD5
113b999da0bbcfd8ebbf3b21bee42fdf
-
SHA1
8c9cc51f6cae6bde5f31736790907e900f8cc4a1
-
SHA256
b2067fd826f5dcbf74a8b27b4ccec65c4af77abc116a0db19a999c328e23655d
-
SHA512
34a1c2f864061a32b376bd1ef17cdba6795a43736b6c9b19694f20bae2ef10dbbacbb568e0e56050efc1e4fcdcaabb069d119dacfe5c4b7f5d44cd106f3fd9b2
-
SSDEEP
3072:ojyYp5ZRZGMPW9wbfksp90+AXmkPkOaN++ubvAXHZ/l:bQlGMmwB0+UknwRbYXR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 113b999da0bbcfd8ebbf3b21bee42fdf_JaffaCakes118
Files
-
113b999da0bbcfd8ebbf3b21bee42fdf_JaffaCakes118.exe windows:4 windows x86 arch:x86
892be19a799414981e4e04ab2c18083b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MulDiv
GetModuleHandleW
GlobalFindAtomW
GetThreadLocale
GetStartupInfoA
GetOEMCP
RemoveDirectoryA
GetVersion
GetCommandLineW
CopyFileA
GlobalFindAtomA
GetCurrentProcess
GetWindowsDirectoryA
DeleteFileA
lstrcmpiW
GetDriveTypeA
lstrcmpA
QueryPerformanceCounter
GetModuleHandleA
GetTickCount
GetCommandLineA
SetCurrentDirectoryA
DeleteFileW
lstrcmpiA
GetConsoleOutputCP
GetProcessHeap
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
lstrlenA
lstrlenW
IsDebuggerPresent
GetUserDefaultLangID
GetACP
VirtualAlloc
VirtualFree
user32
CharNextA
GetDC
GetDesktopWindow
GetParent
GetSystemMetrics
TranslateMessage
gdi32
GetDeviceCaps
CreatePen
GetPixel
GetObjectA
PatBlt
SelectObject
SelectPalette
LineTo
SaveDC
SetTextColor
DeleteObject
RectVisible
GetTextMetricsA
SetStretchBltMode
DeleteDC
SetTextAlign
SetMapMode
GetClipBox
RestoreDC
CreateSolidBrush
CreateFontIndirectA
CreatePalette
CreateCompatibleDC
GetStockObject
glu32
gluNurbsCallback
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Fxtxiwmo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Tsrh Cwi Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ