Static task
static1
Behavioral task
behavioral1
Sample
54c854d105b1cdb1053855808f89296c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
54c854d105b1cdb1053855808f89296c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
54c854d105b1cdb1053855808f89296c_JaffaCakes118
-
Size
166KB
-
MD5
54c854d105b1cdb1053855808f89296c
-
SHA1
67e4ea2da29ffc1b750afd4675a76174bde54d3e
-
SHA256
e8c927ab58d9852ae76bd3913a2a1b1b98dad22b04b6adb48c706c5ff6f3df01
-
SHA512
cf1804a462fad9904cbb69ac738209c746fd615a9f4a38c36b3c233198e499eec26df56325688424e66e0bcd341f1bdd3cb2b02cadff33a651e946f15439b2c7
-
SSDEEP
1536:ZUYmwJGBKlhvdRsRl6C0//xZTqADPxm8fMePINbOqz2uWboAo2aOLcPzr/SZ/IRR:MwJGwDMw9VqAojTn3Ao2aOLcPzSE0Md
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54c854d105b1cdb1053855808f89296c_JaffaCakes118
Files
-
54c854d105b1cdb1053855808f89296c_JaffaCakes118.exe windows:5 windows x86 arch:x86
77197524c2e05697d57b345934a937b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetPixel
CreatePalette
GetStockObject
GetClipBox
RectVisible
LineTo
CreateFontIndirectA
SelectObject
SetStretchBltMode
SetTextColor
SelectPalette
CreateCompatibleDC
GetTextMetricsA
SetTextAlign
DeleteObject
SaveDC
CreateSolidBrush
SetMapMode
PatBlt
GetObjectA
GetDeviceCaps
RestoreDC
DeleteDC
CreatePen
user32
GetDC
TranslateMessage
GetDesktopWindow
GetSystemMetrics
GetParent
CharNextA
kernel32
GetModuleHandleW
DeleteFileW
SetCurrentDirectoryA
GetConsoleOutputCP
GetOEMCP
GetCommandLineW
GetWindowsDirectoryA
lstrcmpiA
RemoveDirectoryA
GetCommandLineA
GetModuleHandleA
GetVersion
lstrlenA
GetCurrentProcess
GetCurrentThread
GetACP
DeleteFileA
GetStartupInfoA
GetTickCount
GetDriveTypeA
MulDiv
GetProcessHeap
lstrcmpiW
IsDebuggerPresent
GetCurrentProcessId
CopyFileA
GlobalFindAtomA
lstrlenW
GlobalFindAtomW
GetThreadLocale
GetCurrentThreadId
QueryPerformanceCounter
GetUserDefaultLangID
VirtualAlloc
VirtualFree
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Wjje Hnx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Oaaswogs Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ