Static task
static1
Behavioral task
behavioral1
Sample
3de0c37ffb623b25cc2662c646db9413_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3de0c37ffb623b25cc2662c646db9413_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3de0c37ffb623b25cc2662c646db9413_JaffaCakes118
-
Size
136KB
-
MD5
3de0c37ffb623b25cc2662c646db9413
-
SHA1
e817604ade7da434b17512e6e25dd795e98a3a50
-
SHA256
6458a98bfcc88c64df90dd927bdb68e424e4a66146bc265aee4fe4bae36b30b7
-
SHA512
8878aa626d4ffc0e292931bf58ee1510168f8d284148e49e58079ef43b2751b51bf1a72eea6e215cc2dade2e4d45e980dee21bb9648ec402cbef5b6ecf966170
-
SSDEEP
3072:Kg6H1HDVa4ziwQ4MXnERZ7s4UyFgtpWRWBUb:Kg6HZoCtMXnERls4U7zGWBUb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3de0c37ffb623b25cc2662c646db9413_JaffaCakes118
Files
-
3de0c37ffb623b25cc2662c646db9413_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ed3bae12bbf4e795428c25ede9c72be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetBkMode
SetStretchBltMode
RectVisible
MoveToEx
GetCharWidth32A
EndPath
GetEnhMetaFilePaletteEntries
SelectPalette
CreateCompatibleBitmap
GetBrushOrgEx
StartPage
SetTextColor
DeleteDC
SelectObject
CreatePen
LineTo
StretchBlt
Rectangle
MaskBlt
SelectClipPath
ExcludeClipRect
OffsetViewportOrgEx
GetPaletteEntries
SetViewportOrgEx
GetDIBColorTable
GetDCOrgEx
DPtoLP
GetTextMetricsA
BeginPath
PatBlt
Chord
ScaleViewportExtEx
EndDoc
RestoreDC
PlayEnhMetaFile
SetColorSpace
PtVisible
CreateRectRgn
IntersectClipRect
SetMapMode
CreateBitmap
GetClipBox
SetDIBColorTable
LPtoDP
SetWindowExtEx
DeleteObject
SaveDC
SetBkColor
BitBlt
CreatePatternBrush
user32
CharNextA
kernel32
GetCurrentProcessId
CopyFileA
GetThreadLocale
GetModuleHandleA
GetCurrentThreadId
lstrcmpiW
GlobalFindAtomA
SetCurrentDirectoryA
GetTickCount
GetProcessHeap
GetCommandLineA
IsDebuggerPresent
DeleteFileW
GetCurrentThread
MulDiv
DeleteFileA
GetModuleHandleW
GetCurrentProcess
GetACP
lstrlenA
GetOEMCP
GlobalFindAtomW
GetLastError
RemoveDirectoryA
GetCommandLineW
VirtualAlloc
GetConsoleOutputCP
lstrlenW
SetLastError
GetVersion
GetUserDefaultLangID
lstrcmpiA
lstrcmpA
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ