Static task
static1
Behavioral task
behavioral1
Sample
4c56a69739612dec0e959f881817cdbf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
4c56a69739612dec0e959f881817cdbf_JaffaCakes118
-
Size
114KB
-
MD5
4c56a69739612dec0e959f881817cdbf
-
SHA1
7fc0e0455ee0328213a89a64fa9bd1b0e35538a1
-
SHA256
8b595958ef58077412d939365ec5a09177eeed45afb2c86ffa7d2ec7ad7ef04a
-
SHA512
fcb48c88c9143efa80d3c9b82e8c055fbced799dd20007adee5f9d4c312af957a0582c8f1a238d46f49ae51cd558ca952d9400c5076479f1be376069f7609709
-
SSDEEP
3072:V8gfKS3rg5tRV6eAfKkj7AE+d/dSn8GgJqNqC4x1ESuQG+3Y:uF/57hq7AE+i8GgoNqbTE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c56a69739612dec0e959f881817cdbf_JaffaCakes118
Files
-
4c56a69739612dec0e959f881817cdbf_JaffaCakes118.exe windows:10 windows x86 arch:x86
182705c05e26adeaf76b137405255637
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
EventWrite
gdi32
BitBlt
user32
GetDC
msvcrt
exit
oleaut32
VariantClear
api-ms-win-core-com-l1-1-1
CoUninitialize
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-errorhandling-l1-1-1
UnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-2
TerminateProcess
api-ms-win-core-libraryloader-l1-2-0
GetModuleHandleA
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-2-1
GetTickCount
comctl32
ord381
dwrite
DWriteCreateFactory
ntdll
WinSqmAddToStream
ole32
CoGetObject
oleacc
LresultFromObject
setupapi
SetupDiGetClassDevsW
uxtheme
GetThemeFont
Sections
.MPRESS1 Size: 54KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE