Static task
static1
Behavioral task
behavioral1
Sample
162cecd9be208cf1540d27794f1d1766_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
162cecd9be208cf1540d27794f1d1766_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
162cecd9be208cf1540d27794f1d1766_JaffaCakes118
-
Size
636KB
-
MD5
162cecd9be208cf1540d27794f1d1766
-
SHA1
62ab4a7dfebc994be2747c84c4ab46085491291a
-
SHA256
79cb14b04e1bcae752a151028d447efc10ded0d04699b0b65b1235b5d16b4b7b
-
SHA512
54a99d1922519c7dff1be1e83c373762a5f72f82a16054f93f8dc6877273228b037f43e04351b0559c3ddd9cddd303caef4e8af414ae042448f2d50897ee2e2f
-
SSDEEP
12288:Ay7jpS31ZxKSpzluJzNo15jH78WtvspyjriT/bmUH4Cu:AYjcZxKcUt2JH7ztdmTA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 162cecd9be208cf1540d27794f1d1766_JaffaCakes118
Files
-
162cecd9be208cf1540d27794f1d1766_JaffaCakes118.exe windows:4 windows x86 arch:x86
0f8821390c0ef71124cbd94138089759
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
LocalSize
CloseHandle
VirtualProtect
GlobalUnlock
CompareFileTime
GetConsoleCP
lstrlenA
GetAtomNameA
GetModuleHandleA
GetTickCount
HeapCreate
SuspendThread
GetCommandLineA
GetVersion
LoadLibraryExA
WaitForSingleObject
WaitForMultipleObjects
InterlockedExchange
GetSystemDefaultLangID
HeapReAlloc
gdi32
Escape
GetMetaFileA
EndPath
GetStringBitmapA
AbortPath
EqualRgn
DeleteDC
GetRgnBox
DeleteObject
CreateFontA
CreateICA
FloodFill
BeginPath
Ellipse
EngLineTo
GetFontData
CreatePalette
GetTextColor
GetMetaRgn
winmm
PlaySoundA
CloseDriver
auxSetVolume
OpenDriver
auxGetVolume
secur32
AddCredentialsA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ