Static task
static1
Behavioral task
behavioral1
Sample
46758f6abd8aaa7217d3af80aec89406_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
46758f6abd8aaa7217d3af80aec89406_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
46758f6abd8aaa7217d3af80aec89406_JaffaCakes118
-
Size
2.3MB
-
MD5
46758f6abd8aaa7217d3af80aec89406
-
SHA1
e5bc95acd1952d057ce1fc1817f537306a7b9583
-
SHA256
1700ee799ad9d0728d910f58d504b3d78124ce369c471876fff9b613a1ca77a2
-
SHA512
2b0343e22f834454489252ec1155fc4dcbb42515e3ba16918e195e6baa5049feffcc53ea5e8ea702d5c36bf01d9e16f5b9aeaade1249b7f7e564406c0bc4b80d
-
SSDEEP
12288:m/RVZ5aERlRaEDYuSDiuPXcfMxMzwMpf6ZMd04umw9CQcgOVTXYyPSYoQyQHBNht:IRVjVlRDYu0yxwMcOd04pJNLSalBNz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46758f6abd8aaa7217d3af80aec89406_JaffaCakes118
Files
-
46758f6abd8aaa7217d3af80aec89406_JaffaCakes118.exe windows:5 windows x86 arch:x86
d283480befafe4bf535ed4acd2dc5a95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetUpdateRect
ExitWindowsEx
CreateWindowExW
SetWindowPlacement
CreateDialogParamW
GetMonitorInfoW
FindWindowExW
SetParent
CopyRect
InvertRect
WindowFromPoint
ClientToScreen
GetWindowTextLengthW
SetWindowTextW
EnableScrollBar
LockWindowUpdate
InvalidateRect
TranslateMessage
EndPaint
ReleaseDC
GetDC
DrawTextW
DrawIcon
GetMenuItemCount
GetSubMenu
CreatePopupMenu
GetFocus
RegisterClipboardFormatW
SendDlgItemMessageW
SetDlgItemTextW
kernel32
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
WriteConsoleW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
VirtualAlloc
GetProcessId
LeaveCriticalSection
WaitForSingleObject
WaitForMultipleObjects
LoadResource
ClearCommError
lstrcmpiW
GetModuleHandleW
DeleteFileW
FindCloseChangeNotification
CompareStringW
GetConsoleWindow
IsDebuggerPresent
TlsFree
TlsSetValue
CloseHandle
EnterCriticalSection
ExitProcess
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
CreateFileW
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
wininet
InternetOpenUrlW
HttpAddRequestHeadersW
HttpSendRequestW
InternetConnectW
advapi32
RegDeleteValueW
RegEnumValueW
Sections
.text Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 224KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.2eqy Size: 534KB - Virtual size: 533KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s1mf Size: 249KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2nso Size: 361KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0t4t7t Size: 482KB - Virtual size: 481KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ