Static task
static1
Behavioral task
behavioral1
Sample
284c02a4876a44252cc278b07debe774_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
284c02a4876a44252cc278b07debe774_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
284c02a4876a44252cc278b07debe774_JaffaCakes118
-
Size
133KB
-
MD5
284c02a4876a44252cc278b07debe774
-
SHA1
f03dd9fbcb5abc08af04d0e7e622c9815e7cfeab
-
SHA256
0eb968c4d45756cab42eb7734b9b749249835d587ded450df3de0ecf2892a393
-
SHA512
f3a5ba723102b7d6f5e185f5179fcd0db264c2aeb9dc2e15e574cb97e94c99d2f43cac7cd4e0694d046069cb59390c96eb91aa3df0ab922b1785afb8886f236a
-
SSDEEP
3072:DPpHsTTvq4wpKAkaxAE2cvzVwIhFwDXTz4sF3lX:Lpsy4WKAkmA76zVwIhFwjTfVX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 284c02a4876a44252cc278b07debe774_JaffaCakes118
Files
-
284c02a4876a44252cc278b07debe774_JaffaCakes118.exe windows:4 windows x86 arch:x86
54af4c7b19d3b8cb0b0b9ef78d29a9a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBitmap
PtVisible
SetViewportOrgEx
RectVisible
GetDCOrgEx
GetBrushOrgEx
GetTextMetricsA
LineTo
UnrealizeObject
EndPage
GetCharWidth32A
CreateRectRgn
SetBrushOrgEx
CreatePatternBrush
GetEnhMetaFilePaletteEntries
SetMapMode
SetTextColor
DeleteDC
MoveToEx
SetROP2
SetBkColor
EndPath
GetPixel
CreatePen
MaskBlt
SelectPalette
GetStockObject
SelectObject
DeleteObject
SetWindowExtEx
DPtoLP
StartPage
GetClipBox
PatBlt
RestoreDC
PlayEnhMetaFile
LPtoDP
EndDoc
Chord
ScaleViewportExtEx
GetDIBColorTable
SelectClipPath
SaveDC
CreateCompatibleBitmap
BeginPath
kernel32
GetTickCount
lstrlenA
IsDebuggerPresent
RemoveDirectoryA
GetProcessHeap
VirtualAlloc
SetCurrentDirectoryA
DeleteFileW
GetCommandLineA
CopyFileA
GetCurrentProcessId
GlobalFindAtomA
GetModuleHandleW
GetThreadLocale
SetLastError
GetUserDefaultLangID
MulDiv
GetVersion
GetLastError
lstrcmpiA
DeleteFileA
GetCommandLineW
GetCurrentProcess
GlobalFindAtomW
GetCurrentThreadId
lstrlenW
GetOEMCP
GetModuleHandleA
lstrcmpiW
GetCurrentThread
GetConsoleOutputCP
user32
CharNextA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ