Static task
static1
Behavioral task
behavioral1
Sample
f9419b9367642c0ec3c7ead79dbdeea1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9419b9367642c0ec3c7ead79dbdeea1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9419b9367642c0ec3c7ead79dbdeea1_JaffaCakes118
-
Size
287KB
-
MD5
f9419b9367642c0ec3c7ead79dbdeea1
-
SHA1
48816c2cf50ca85f4057f3e801b8d226cf6bd700
-
SHA256
d781b32611d5c4f6e61104217e3ddbc97099e4c8da72452874616669ed711016
-
SHA512
ff2a713e2cd97aedb102fae190f15724e89d2ec8673d90d5d15bb451aaef805f051dbc41d135a31cc960299dc1c11cb2bcdd32fbcd36d95d5960fc21b1e3a67f
-
SSDEEP
3072:ijT4rbUoa/jCs1kqphlmSFttChXTwu9HB:IXtChpB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9419b9367642c0ec3c7ead79dbdeea1_JaffaCakes118
Files
-
f9419b9367642c0ec3c7ead79dbdeea1_JaffaCakes118.exe windows:4 windows x86 arch:x86
0754e7fab5fa94cb2c0f950dea3d9863
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
CloseHandle
GetFileSize
CreateFileA
GetTickCount
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
GetModuleFileNameA
GetFileAttributesA
lstrlenA
WaitForSingleObject
CreateProcessA
SetEndOfFile
WriteFile
SetFilePointer
CopyFileA
MapViewOfFile
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
GetCommandLineA
UnmapViewOfFile
lstrcmpiA
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetStringTypeW
user32
DestroyWindow
IsDlgButtonChecked
GetDlgItemInt
wsprintfA
LoadIconA
SendMessageA
DialogBoxParamA
SendDlgItemMessageA
CheckDlgButton
LoadBitmapA
GetWindowLongA
SetWindowLongA
SetTimer
MessageBoxA
MessageBoxIndirectA
KillTimer
GetClassNameA
gdi32
SetBkMode
CreatePatternBrush
DeleteObject
comdlg32
GetOpenFileNameA
shell32
DragAcceptFiles
DragQueryFileA
DragFinish
Sections
.text Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ