Static task
static1
Behavioral task
behavioral1
Sample
436620513ddfac46af7317cd7610327f_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
436620513ddfac46af7317cd7610327f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
436620513ddfac46af7317cd7610327f_JaffaCakes118
-
Size
165KB
-
MD5
436620513ddfac46af7317cd7610327f
-
SHA1
1be9937b4cdad25b61b00861c0de0cb49cf7e597
-
SHA256
73a2aa4a4a88a5c35c1c6e2c50f59fdc80ad74389d529f9c727ca347ee391358
-
SHA512
2f861d3e16ba6b8514ed3f98a874bcb10e52e468baf1ba9a6fe98f319eefd153c54bf72b672c93891c4b8cd10b42228c549e9716726cc2f7f486cfb7f074334e
-
SSDEEP
3072:FaOT42Yu5X6tnF2A/D6MTcOdyL9ObLJMQfmeq:02Yu5gd+MTcOd09Cg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 436620513ddfac46af7317cd7610327f_JaffaCakes118
Files
-
436620513ddfac46af7317cd7610327f_JaffaCakes118.exe windows:5 windows x86 arch:x86
d29ae0507413f3f20f616037aeb27bdd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SaveDC
SetTextAlign
GetClipBox
CreatePalette
GetTextMetricsA
RectVisible
CreateCompatibleDC
SetTextColor
GetObjectA
GetStockObject
SetStretchBltMode
CreateSolidBrush
PatBlt
GetPixel
DeleteDC
SelectObject
DeleteObject
SetMapMode
GetDeviceCaps
CreateFontIndirectA
CreatePen
SelectPalette
RestoreDC
LineTo
kernel32
QueryPerformanceCounter
lstrlenW
GlobalFindAtomA
GetACP
GetStartupInfoA
lstrcmpA
IsDebuggerPresent
VirtualAlloc
lstrlenA
DeleteFileW
MulDiv
GetModuleHandleW
GetVersion
GetModuleHandleA
SetCurrentDirectoryA
VirtualFree
GetConsoleOutputCP
GetCommandLineA
lstrcmpiA
CopyFileA
lstrcmpiW
GetCurrentProcessId
GetThreadLocale
GetCurrentThread
GetDriveTypeA
GetCurrentProcess
GlobalFindAtomW
GetCurrentThreadId
GetProcessHeap
RemoveDirectoryA
GetWindowsDirectoryA
GetCommandLineW
GetUserDefaultLangID
GetOEMCP
DeleteFileA
user32
CharNextA
GetParent
GetSystemMetrics
GetDC
TranslateMessage
GetDesktopWindow
glu32
gluNurbsCallback
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Hkxgqfwe Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Wyjexokq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ