Static task
static1
Behavioral task
behavioral1
Sample
43990a0f4a5bbd02531dfce286e16878_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43990a0f4a5bbd02531dfce286e16878_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43990a0f4a5bbd02531dfce286e16878_JaffaCakes118
-
Size
76KB
-
MD5
43990a0f4a5bbd02531dfce286e16878
-
SHA1
04e3c97c84b613eab931690baecf4036d3a136fe
-
SHA256
41f857385c9e5c35a3e3f01851004ee4a1193349386c694198bbbf18cab588a3
-
SHA512
db4ff35acdafd06cc8d6db78b3b3c585813c402d2ddf5fa0b7870882a38048dcd215e52f85783e484456cb26b052dc524fa003ed5ce3b4d8983c0bd7e39f76e4
-
SSDEEP
768:fxZPuaiXW47iYtikS4Ty63qkEtMcc4N5qwl0QZiANbOg8RpRX11oEgLLtfofYhI:f/WXWFfkS47stMcJM48rZHoEgHt3S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43990a0f4a5bbd02531dfce286e16878_JaffaCakes118
Files
-
43990a0f4a5bbd02531dfce286e16878_JaffaCakes118.exe windows:4 windows x86 arch:x86
cc15a3c28e80cec0ff09308ce59e0af0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
FindResourceA
LoadResource
GetProcessHeap
HeapAlloc
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
MultiByteToWideChar
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
Sleep
GetCommandLineA
HeapFree
GetVersionExA
GetStartupInfoA
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
user32
GetWindowLongA
GetCaretBlinkTime
DefWindowProcA
RegisterClassA
CreateWindowExA
ReleaseDC
GetDC
IsZoomed
gdi32
SetColorSpace
ChoosePixelFormat
SetPixelFormat
GetTextColor
opengl32
wglShareLists
wglGetProcAddress
wglRealizeLayerPalette
wglGetCurrentContext
wglSwapLayerBuffers
wglGetCurrentDC
wglCreateContext
wglMakeCurrent
glLightiv
glGetLightiv
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ