Static task
static1
Behavioral task
behavioral1
Sample
4286965150f6a46260fb74e915eea5af_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4286965150f6a46260fb74e915eea5af_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
4286965150f6a46260fb74e915eea5af_JaffaCakes118
-
Size
982KB
-
MD5
4286965150f6a46260fb74e915eea5af
-
SHA1
8527eca7a369d8ddef2f50daa407f75ac07dda33
-
SHA256
45d1286718025e30b93b1568ff5014ef1b9b67db953750d5a209913297d8fb8b
-
SHA512
2659af5b9bb03379646fabe072857a2ab3cbde8cb458e39b2da83517f8d13b96b9bd59e97006e9442451c558f84d60b067e60b848181e8111f2a97cc740ec027
-
SSDEEP
24576:xELC+GTiKQnkbggQiXvZyp8hhAVgfHF0afyp:xsQQUn8p7Vgfu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4286965150f6a46260fb74e915eea5af_JaffaCakes118
Files
-
4286965150f6a46260fb74e915eea5af_JaffaCakes118.exe windows:5 windows x86 arch:x86
da81bdbfcb2fddc93dc692c0d26172ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_exit
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
userenv
ExpandEnvironmentStringsForUserW
GetUserProfileDirectoryW
UnregisterGPNotification
oleaut32
RegisterTypeLi
LoadTypeLi
VarNot
VarNeg
VarBstrFromBool
VarBstrFromCy
VarCyFromStr
VarDateFromStr
VarR8FromStr
VarI4FromStr
VariantChangeType
VariantCopy
VariantInit
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayRedim
SysStringLen
SysAllocStringLen
VarBstrFromDate
kernel32
GetProcAddress
GlobalAlloc
VirtualAlloc
HeapDestroy
GetEnvironmentStringsW
GetCurrentThreadId
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LoadResource
GetFileType
SetEndOfFile
CloseHandle
GetSystemTimeAsFileTime
GetModuleHandleW
GetThreadLocale
CompareStringW
GetVersionExW
QueryPerformanceCounter
GetTempPathW
FindResourceW
OutputDebugStringW
GetStartupInfoW
GetLocalTime
GetVersion
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nbg11 Size: 563KB - Virtual size: 563KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erb04 Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ