Static task
static1
Behavioral task
behavioral1
Sample
4ba040cd37c2377080ac0ab46c0e0f29_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4ba040cd37c2377080ac0ab46c0e0f29_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
4ba040cd37c2377080ac0ab46c0e0f29_JaffaCakes118
-
Size
351KB
-
MD5
4ba040cd37c2377080ac0ab46c0e0f29
-
SHA1
7e82e62d98df025b1ef7ddd9fbadeaa6d70394d9
-
SHA256
9d6deb673f680360e6e174d5e908c01a72de5a25d3d57abeba1a3fe7b3bd5897
-
SHA512
bf282fd2e7c733b70dfd8f52e5d8aa006bf738eea1add3f7b07a0b0729e8c27b8076fe02bf9b6f15dc73c1fd7330762d87e5b5f94f3cc60289333abbb009e181
-
SSDEEP
6144:dOH7owoxfZMSHMdEyXD1DkoMBulp/vmhGAgcPVdHel3J:dOH7poBxeZD7MBuLmGA565
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 4ba040cd37c2377080ac0ab46c0e0f29_JaffaCakes118
Files
-
4ba040cd37c2377080ac0ab46c0e0f29_JaffaCakes118.exe windows:4 windows x86 arch:x86
576f19a4febda13fa504034211eb9578
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegDisablePredefinedCache
kernel32
LoadResource
CreateProcessW
SearchPathA
GlobalAlloc
ExpandEnvironmentStringsW
CloseHandle
LoadLibraryA
EnumResourceNamesA
GetProcAddress
SizeofResource
ExitProcess
GetWindowsDirectoryW
LoadLibraryExW
lstrlenW
LockResource
WaitForSingleObject
lstrlenA
ExpandEnvironmentStringsA
MulDiv
GlobalFree
FindResourceA
GetProcessHeap
CreateProcessA
GetModuleHandleA
SearchPathW
LoadLibraryExA
FreeLibrary
user32
GetCursorPos
MessageBoxW
PostMessageA
SetActiveWindow
LoadCursorA
TrackPopupMenu
CreateDialogParamW
GetWindowTextW
ClientToScreen
GetSysColor
EnableMenuItem
SetTimer
RegisterClassW
SetWindowTextA
InvalidateRect
IsWindowVisible
SendMessageA
ReleaseDC
CreateIconIndirect
DefWindowProcW
UnregisterClassA
ScreenToClient
DestroyWindow
SetDlgItemTextW
GetSubMenu
CreateIconFromResourceEx
GetWindowLongW
GetMenuStringW
GetWindowTextA
DestroyIcon
CallWindowProcW
GetMenuState
DefWindowProcA
GetDC
GetWindowLongA
GetSystemMetrics
SetWindowPos
LookupIconIdFromDirectoryEx
CreateDialogParamA
RegisterClassA
UpdateWindow
GetDlgItem
SetWindowLongW
CreateWindowExW
SetDlgItemTextA
SetWindowLongA
CallWindowProcA
LoadImageA
KillTimer
GetKeyState
GetMenuStringA
CreateWindowExA
UnregisterClassW
GetIconInfo
LoadImageW
SetWindowTextW
gdi32
SetDIBits
DeleteObject
GetObjectA
GetDIBits
GetDeviceCaps
comctl32
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Destroy
Sections
.text Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE