Static task
static1
Behavioral task
behavioral1
Sample
4111507f22d3b510d099d6f0ae9a8a7d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4111507f22d3b510d099d6f0ae9a8a7d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4111507f22d3b510d099d6f0ae9a8a7d_JaffaCakes118
-
Size
784KB
-
MD5
4111507f22d3b510d099d6f0ae9a8a7d
-
SHA1
b07429bdbf37eb599e4319961a844e3b41dbe7d8
-
SHA256
40914686bcbbc76beb549899d4f7fafbb2e91bb62fb5bd474e70f411edb06108
-
SHA512
6b32e419077ee5153ac7c2d2822f07ceeb39e5491e42683eac4432c82c782133ff638bf738b3fb63e65363c0c24d586af55d8d09f56fccc1a8710bee4fed38ac
-
SSDEEP
12288:I5RMdw4CPg0DoSH/P/lheLK2gUkgIXBKtiEsiSGasccZsrGx6JvaDiZL3:URMdGNDt/H5hGI1RscmiGmag
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4111507f22d3b510d099d6f0ae9a8a7d_JaffaCakes118
Files
-
4111507f22d3b510d099d6f0ae9a8a7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
ea09ca7c13cd34532a44fe67ac2c74dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
IsBadStringPtrW
LoadLibraryW
GetCurrentProcessId
CloseHandle
GlobalFlags
GetDriveTypeA
InitializeCriticalSection
LocalFree
GetEnvironmentVariableW
GetCurrentThreadId
GetFileTime
HeapCreate
FindClose
WriteFile
ReleaseMutex
ReleaseMutex
CreateEventW
lstrlenW
GetPrivateProfileStringA
user32
GetCursorInfo
GetSysColor
GetKeyboardType
CreateWindowExA
GetClassInfoA
EndDialog
SetFocus
CallWindowProcW
GetClientRect
GetSysColor
DispatchMessageA
DrawStateW
IsWindow
ntlanman
NPGetConnection
NPGetConnection
NPGetConnection
NPGetConnection
NPGetConnection
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 774KB - Virtual size: 773KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ