Static task
static1
Behavioral task
behavioral1
Sample
4022691be741d8b7f3814c122e9e9ec7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4022691be741d8b7f3814c122e9e9ec7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4022691be741d8b7f3814c122e9e9ec7_JaffaCakes118
-
Size
199KB
-
MD5
4022691be741d8b7f3814c122e9e9ec7
-
SHA1
1c660e6cf1694f909c4b064fdcd9c9cbb7b96b1d
-
SHA256
a7c94ede70b71b20773586935e40a53caa177660853139d8b4f812b60a30905a
-
SHA512
617600e0e6481f5b9188299075b0d54693ad31d9f0cdcf32fa8735eee66092f4e42132078742e573701fa3864ea399afeb27299407ee3bd8b04527a34f9eb5ea
-
SSDEEP
3072:Ab9NZIuALltbOOgTl5PTn96FqBbd2Pk7+jd2TTKFurSC+da:ieLXbkoq9d2Pk7+jATKFzCL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4022691be741d8b7f3814c122e9e9ec7_JaffaCakes118
Files
-
4022691be741d8b7f3814c122e9e9ec7_JaffaCakes118.exe windows:4 windows x86 arch:x86
c8c5bc410b282495dd905c54df8d4f8b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
GetDesktopWindow
GetSystemMetrics
CharNextA
kernel32
Sleep
GetCommandLineA
SetLastError
GetProcessHeap
SetCurrentDirectoryA
MulDiv
GetCommandLineW
GetWindowsDirectoryA
IsDebuggerPresent
RemoveDirectoryA
lstrcmpA
GetTickCount
QueryPerformanceCounter
GetThreadLocale
GetModuleHandleA
GetVersion
lstrcmpiA
GetUserDefaultLangID
GetModuleHandleW
GlobalFindAtomW
CopyFileA
GetCurrentThreadId
LoadLibraryW
GetACP
lstrlenW
GetCurrentThread
GetStartupInfoA
GetCurrentProcessId
GetConsoleOutputCP
GetDriveTypeA
DeleteFileA
GetCurrentProcess
DeleteFileW
GetLastError
lstrcmpiW
lstrlenA
GlobalFindAtomA
GetOEMCP
VirtualAlloc
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE