Static task
static1
Behavioral task
behavioral1
Sample
4da31d709127fce9c154bcaec6ccaffa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4da31d709127fce9c154bcaec6ccaffa_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
4da31d709127fce9c154bcaec6ccaffa_JaffaCakes118
-
Size
2.3MB
-
MD5
4da31d709127fce9c154bcaec6ccaffa
-
SHA1
92b9ec3bccad68f3fdb422e53b8235b6a39b2ae1
-
SHA256
d4cc1d506f817b6cccf1a22c0139e8c2bc6a9fc741fa1afb53b9a0f10003cb76
-
SHA512
5f40ce2ef8345d68b93c3448f4e99e93b6d99dbaf8360ec89aba0d1629188c3e030d82c2528cfe6c6e6ac4ee65b3f954da5be9ee69f0d0dc1cc1f5dc9c4229fd
-
SSDEEP
24576:F81vuVyVLEa5GD5Mm7FvuPG3lvmJCAmIMntS3ttRG:EuwUUulIdL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4da31d709127fce9c154bcaec6ccaffa_JaffaCakes118
Files
-
4da31d709127fce9c154bcaec6ccaffa_JaffaCakes118.exe windows:5 windows x86 arch:x86
2c44db9c5bcb02ff6102b29d21023f20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetEnvironmentStringsW
GetLastError
CloseHandle
GetSystemTimeAsFileTime
CreateProcessW
ExpandEnvironmentStringsW
FindResourceExW
GetLocaleInfoW
GetUserDefaultLCID
userenv
UnregisterGPNotification
ExpandEnvironmentStringsForUserW
LoadUserProfileW
shell32
DragAcceptFiles
ShellExecuteW
ExtractIconExW
SHFileOperationW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHChangeNotify
SHPathPrepareForWriteW
user32
GetKeyboardLayoutList
DrawEdge
EndDialog
SendDlgItemMessageW
SetCapture
ReleaseCapture
SetTimer
CreatePopupMenu
DestroyMenu
RemoveMenu
DeleteMenu
DrawTextW
SetActiveWindow
GetDCEx
GetClientRect
MessageBoxW
mpr
WNetGetLastErrorW
WNetOpenEnumW
WNetGetConnectionW
wintrust
WinVerifyTrust
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
CryptCATAdminReleaseContext
CryptCATAdminEnumCatalogFromHash
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 63.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.f4dae6 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ