Static task
static1
Behavioral task
behavioral1
Sample
3ecc9dbec70d38d8c6afe3555ac3a5b7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3ecc9dbec70d38d8c6afe3555ac3a5b7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3ecc9dbec70d38d8c6afe3555ac3a5b7_JaffaCakes118
-
Size
117KB
-
MD5
3ecc9dbec70d38d8c6afe3555ac3a5b7
-
SHA1
c156e7fa02696a59360fda8c8b5b59561c807e45
-
SHA256
7e17ae3227b358371e9d14895cae7c94fe07953d7d79bb656aaa4000e52022c1
-
SHA512
dcc27ff87eadbc86929ec21ec10b9e01497c8ad76fe013243ae88995be5d4d2d6d9525ef7fd656a74ce6e0eee9ac62e9e7326dbf466f0f66e7858fd7eb410860
-
SSDEEP
1536:fwT3WA11RaYc+tXuSvG3sugoUf7Am8lUBIxghzb04N3i6Gf1Ys25bOGk/F:4/Raiq3suiAmRBIQzb0Us25bOn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ecc9dbec70d38d8c6afe3555ac3a5b7_JaffaCakes118
Files
-
3ecc9dbec70d38d8c6afe3555ac3a5b7_JaffaCakes118.exe windows:5 windows x86 arch:x86
2d014824d75ef715f93a00c78f18f9a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RestoreDC
GetDeviceCaps
SetStretchBltMode
RectVisible
CreateSolidBrush
SetTextColor
GetPixel
SelectObject
GetStockObject
SelectPalette
GetObjectA
CreateFontIndirectA
GetTextMetricsA
GetClipBox
LineTo
SaveDC
SetTextAlign
DeleteObject
CreateCompatibleDC
SetMapMode
kernel32
lstrlenW
CopyFileA
GetWindowsDirectoryA
lstrlenA
lstrcmpiW
GetCommandLineA
GetModuleHandleA
GlobalFindAtomA
lstrcmpA
lstrcmpiA
QueryPerformanceCounter
GetSystemTime
RemoveDirectoryA
RemoveDirectoryW
FindClose
DeleteFileA
VirtualAlloc
VirtualFree
user32
TranslateMessage
GetDesktopWindow
CharNextA
GetParent
GetDC
GetSystemMetrics
glu32
gluNurbsCallback
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ