Static task
static1
Behavioral task
behavioral1
Sample
522a3846d3eaf61f6581f5d775aedefb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
522a3846d3eaf61f6581f5d775aedefb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
522a3846d3eaf61f6581f5d775aedefb_JaffaCakes118
-
Size
692KB
-
MD5
522a3846d3eaf61f6581f5d775aedefb
-
SHA1
a3780ad2015cd50b78ff91d075876d8a12048cd4
-
SHA256
e18ecef7197cfceae536dca9c58326cda80ac18fe76b30edf522aff805af7e71
-
SHA512
536c7c5e13fc60aba8d48c40491a1aedaaeee34ecfe0bd4f0e13369107e9f5b15cda8d8f0ea794a989b1d1f39b00a38e92b0d30b4870d85d89d88ac8d3b9d3cf
-
SSDEEP
12288:WynWkVm4027D9+uvyVUdu7S8fcG2n3W7NC1MEAXQJanaq/XOMORNnDt1va2IN9fU:b1nDw+y7WgaM/QJo2xDx1vvITRW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 522a3846d3eaf61f6581f5d775aedefb_JaffaCakes118
Files
-
522a3846d3eaf61f6581f5d775aedefb_JaffaCakes118.exe windows:4 windows x86 arch:x86
8a42d41f85ff986c73b6a357acbfc120
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetVersion
CloseHandle
GetLastError
LocalAlloc
CreateEventA
GetTickCount
GetModuleHandleA
GetVersionExA
lstrcatA
gdi32
MoveToEx
BitBlt
GetTextColor
GetPixel
GetObjectA
GetTextExtentPoint32A
SetBkMode
SetPixel
GetStockObject
CreateSolidBrush
GetDeviceCaps
SelectObject
CreateCompatibleDC
DeleteObject
SetROP2
ExtTextOutA
CreateFontIndirectA
LineTo
Sections
.text Size: 1024B - Virtual size: 967B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 686KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ