Static task
static1
Behavioral task
behavioral1
Sample
4077d541423dce3c909b176389e12fbf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4077d541423dce3c909b176389e12fbf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4077d541423dce3c909b176389e12fbf_JaffaCakes118
-
Size
130KB
-
MD5
4077d541423dce3c909b176389e12fbf
-
SHA1
bde4811ce78678392b4203ec4901d37d83f9827e
-
SHA256
9770f50f89ee1b36325628a023b88ca2f9310cad266066d040e2b95d0a085536
-
SHA512
34f0aac582adb494e4a5d2906a00800629bb5fceca8c05f4f576f46dd224269e985087d4022d933542a1be1c2b72a013ec1b9591ca66650b3143eb9da4255854
-
SSDEEP
3072:k68knAankWkriLa9S1qyz4jFa/gfu9llyU1A4aQvAUEPNQE0onsxdH6Pr1fvIKEP:kgAankWkriLa9S1qyz4jFa/jTyU1A4nf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4077d541423dce3c909b176389e12fbf_JaffaCakes118
Files
-
4077d541423dce3c909b176389e12fbf_JaffaCakes118.exe windows:4 windows x86 arch:x86
28aff96725da67b0b5fad5577f961dc4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CreateSemaphoreA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WritePrivateProfileStringA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
getenv
malloc
memchr
memcpy
memmove
memset
signal
strcmp
strlen
user32
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
LoadCursorA
LoadIconA
LoadMenuA
MessageBoxA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 17KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE