Static task
static1
Behavioral task
behavioral1
Sample
4148c8d9efbe3bc704c8c18e41f42c6f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4148c8d9efbe3bc704c8c18e41f42c6f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4148c8d9efbe3bc704c8c18e41f42c6f_JaffaCakes118
-
Size
188KB
-
MD5
4148c8d9efbe3bc704c8c18e41f42c6f
-
SHA1
e79d752c739bca8834e2beba2d48b16fd0d9e3bc
-
SHA256
7f7ba2ccf3a027243d57b20cb4b355909a636569ea7d5c848008edc6af2fe0c5
-
SHA512
537efd7b3a9ff2cf3d13feabdac4ff48f95fd6f85c3366394feff79a269a064b613aaa8ae75c94710879fa7960c17dda0fb3ae017d331bb6d9b97bc03c5424ff
-
SSDEEP
3072:JZtroFRbwniRVpqjbfIw5S4GJLNWlZva5BwHOWtK9ktvW:XnipAgiS4GJpW7aUHOW8qJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4148c8d9efbe3bc704c8c18e41f42c6f_JaffaCakes118
Files
-
4148c8d9efbe3bc704c8c18e41f42c6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
8ba20de2a21cfa3c09aa410928577661
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AllocConsole
DuplicateHandle
GetSystemTimeAsFileTime
GetFileSize
CreateDirectoryA
VirtualAlloc
VirtualFree
GetProcAddress
AddAtomA
GetModuleHandleA
QueueUserAPC
GetCurrentThread
CloseHandle
CreateEventA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
user32
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
MsgWaitForMultipleObjectsEx
PeekMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
PostMessageA
DestroyWindow
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ