Static task
static1
Behavioral task
behavioral1
Sample
4135bbac3d95177ece76ee635599ae21_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4135bbac3d95177ece76ee635599ae21_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4135bbac3d95177ece76ee635599ae21_JaffaCakes118
-
Size
41KB
-
MD5
4135bbac3d95177ece76ee635599ae21
-
SHA1
5db173d0f32fdbc97e2c68b4e3f3876cf4a64de3
-
SHA256
4e114b9bbe9ac56486e4da7d9f153ef8f4f937dd1a9475f0d501c6b4eccb1ca4
-
SHA512
97c9ab36b33dd003340c8ae1f1f36fcc54201da73d0d3ff7ac79a7e25b2b90784c6df78082c5cdf6e2176f1c9941c14889bc7f959d7e5a6a8b1d1d6552f8c301
-
SSDEEP
384:lUx+wtFpLiTwUE6ewZARDt9INaaAAITIs0iiFQxUAAyJSr+8DccOz6Mv78nqhAJ+:l6tvLSBZoiIMy/JS6iccG6MoJ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4135bbac3d95177ece76ee635599ae21_JaffaCakes118
Files
-
4135bbac3d95177ece76ee635599ae21_JaffaCakes118.exe windows:4 windows x86 arch:x86
49ca27fd021cb0c37dd8a11a3487e840
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CreateStreamOnHGlobal
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject
gdiplus
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToStream
GdiplusShutdown
GdiplusStartup
user32
SendMessageA
ReleaseDC
RegisterHotKey
MessageBoxA
MapVirtualKeyA
GetWindowTextA
GetWindowRect
SetWindowsHookExA
GetKeyboardState
GetKeyState
GetKeyNameTextA
GetForegroundWindow
GetDC
GetClassNameA
EnumChildWindows
ToAscii
CallNextHookEx
UnhookWindowsHookEx
GetMessageA
kernel32
GetFileSize
CreateMutexA
CreateFileA
lstrlenA
lstrcmpA
lstrcatA
WideCharToMultiByte
Sleep
RtlZeroMemory
RtlMoveMemory
ReleaseMutex
OpenMutexA
GlobalUnlock
GlobalSize
GlobalLock
GlobalFree
GlobalAlloc
GetTickCount
GetModuleHandleA
CloseHandle
ReadFile
CreateThread
ExitProcess
ExpandEnvironmentStringsA
FindFirstFileA
GetLastError
advapi32
GetUserNameA
wininet
InternetConnectA
InternetOpenA
InternetOpenUrlA
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetCloseHandle
shell32
ShellExecuteA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE