Static task
static1
Behavioral task
behavioral1
Sample
4b893a7d955b14fa6e9360fc0e0d1bb5_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4b893a7d955b14fa6e9360fc0e0d1bb5_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
4b893a7d955b14fa6e9360fc0e0d1bb5_JaffaCakes118
-
Size
833KB
-
MD5
4b893a7d955b14fa6e9360fc0e0d1bb5
-
SHA1
1cb22cb292ce6c602586cecf068f0a2796e26675
-
SHA256
b91658a83c4a62db281faa1e635769ba6a0079f6b4a1a236c4b319c630db8435
-
SHA512
17ccd7c6087b5e56f0ba537f4ded8b5efa306495be06b3101de53434935ff21509d93f63964b2ae795f947907a46b02eec360b1c0bd62ac9f05ffe6f17a7e36e
-
SSDEEP
24576:e3T2ix+xxDRCCEigKIz7Q89AQuFtekG941QE6p+sfu:ejNcDfgK18mQoqox
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b893a7d955b14fa6e9360fc0e0d1bb5_JaffaCakes118
Files
-
4b893a7d955b14fa6e9360fc0e0d1bb5_JaffaCakes118.exe windows:5 windows x86 arch:x86
69bbdbbe07550d9ef8be2e0214190b83
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
secur32
FreeContextBuffer
InitializeSecurityContextW
advapi32
RegDeleteKeyW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
user32
GetNextDlgGroupItem
TranslateMessage
RegisterClassW
GetIconInfo
SetCursor
ScrollWindow
DdeUninitialize
IsIconic
uxtheme
CloseThemeData
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
EnableThemeDialogTexture
kernel32
WriteConsoleW
GetModuleHandleExW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapReAlloc
OutputDebugStringW
GetProcAddress
VirtualAlloc
HeapAlloc
HeapFree
HeapSize
GetCurrentThreadId
GetLastError
EnterCriticalSection
DeleteCriticalSection
GetFileType
CloseHandle
LocalFileTimeToFileTime
lstrlenW
SetWaitableTimer
ExpandEnvironmentStringsW
FindAtomW
GetCPInfo
WideCharToMultiByte
GetStringTypeW
GetConsoleWindow
RtlUnwind
LoadLibraryExW
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
ExitProcess
CreateFileW
MultiByteToWideChar
GetProcessHeap
GetStdHandle
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
IsDebuggerPresent
IsProcessorFeaturePresent
psapi
GetProcessImageFileNameW
GetDeviceDriverBaseNameW
GetModuleFileNameExW
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 749KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE