Static task
static1
Behavioral task
behavioral1
Sample
4b0816787a4ec557a8d4f47fa53a68ae_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4b0816787a4ec557a8d4f47fa53a68ae_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
4b0816787a4ec557a8d4f47fa53a68ae_JaffaCakes118
-
Size
2.8MB
-
MD5
4b0816787a4ec557a8d4f47fa53a68ae
-
SHA1
38fee6705ae391aa61a5dcd78fba5c74df9b1847
-
SHA256
068472ed7f8872ba914ddf6e49d3708404d833d6989e2e9ab5d6959a189b60ef
-
SHA512
a6ed7bfc199ebb7ba13b3891ce7f1260b362f7761c1478cc8a46d71f9152672bcc4453d3168693980e106fbd38dd020feb733d52931f1b920399832e110c8c54
-
SSDEEP
24576:hoLM1NxodM5nFb7T2fFckt6lnHjMJ8FFtr0S3AFOzM/70GTgxhTbTnoenl:h5edElT8UWSZw0oy/TDnl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b0816787a4ec557a8d4f47fa53a68ae_JaffaCakes118
Files
-
4b0816787a4ec557a8d4f47fa53a68ae_JaffaCakes118.exe windows:5 windows x86 arch:x86
7294644dbbfbe3e6ce7a88823bb7e5a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetForegroundWindow
PostThreadMessageW
TranslateMDISysAccel
LoadImageW
SetParent
EqualRect
InvertRect
FrameRect
SetCursor
ShowCursor
GetClientRect
ScrollWindowEx
GetWindowRgnBox
GetWindowRgn
GetDCEx
GetProcessWindowStation
DrawIcon
AppendMenuW
CheckMenuItem
DrawMenuBar
GetMenu
LoadMenuW
MapVirtualKeyW
GetPriorityClipboardFormat
GetDlgItemInt
DialogBoxParamW
BringWindowToTop
FlashWindow
RegisterClassW
winspool.drv
SetPortW
advapi32
RegCloseKey
RegSetValueExW
OpenSCManagerW
RegDeleteValueW
kernel32
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
IsValidCodePage
IsDebuggerPresent
LCMapStringW
VirtualAlloc
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
PulseEvent
lstrlenW
GetModuleHandleW
GetStartupInfoW
GetDiskFreeSpaceW
FindFirstFileExW
FindCloseChangeNotification
GetACP
GetOEMCP
GetCPInfo
GetConsoleWindow
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
IsProcessorFeaturePresent
EncodePointer
GetCommandLineW
RaiseException
CreateFileW
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
crypt32
CertFreeCertificateContext
CryptDecodeObjectEx
CertFreeCRLContext
CryptExportPKCS8
CertFreeCertificateChain
CryptMsgUpdate
CertOpenStore
CertVerifyCertificateChainPolicy
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 767KB - Virtual size: 7.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.e6r1aa Size: 409KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e8et Size: 559KB - Virtual size: 559KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m8ur0 Size: 395KB - Virtual size: 395KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ie313 Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ