Static task
static1
Behavioral task
behavioral1
Sample
41b0779f406274c62d63f6383b05320f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
41b0779f406274c62d63f6383b05320f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41b0779f406274c62d63f6383b05320f_JaffaCakes118
-
Size
276KB
-
MD5
41b0779f406274c62d63f6383b05320f
-
SHA1
04fe3b099111ad72730ff5e00dc27377a3d00281
-
SHA256
9cfa4a746b81298c5c061dd3f2b3f3c040ba781c73c1007c6b2bd50efd360e6c
-
SHA512
97106f1cc311ff5451438e86cb8b3d60dee84e472c17441d6fe263408976a5d5ff11eef53b39170dc60340c37cac9f4f1840733b8b6a0f90828e7ae718586915
-
SSDEEP
6144:J6zCDeb5+zh8jFC/+RfakwQaM/ufMcsdHszhp:J6ac5+9YlskwQj/ufMdHup
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41b0779f406274c62d63f6383b05320f_JaffaCakes118
Files
-
41b0779f406274c62d63f6383b05320f_JaffaCakes118.exe windows:4 windows x86 arch:x86
19b6dfb8e05a5c763a3954ca98a8f594
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateThread
CloseHandle
CreateToolhelp32Snapshot
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
GetProcAddress
GetModuleHandleA
VirtualAllocEx
OpenProcess
WriteProcessMemory
VirtualProtectEx
VirtualProtect
Process32Next
Process32First
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetLastError
HeapReAlloc
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
FlushFileBuffers
user32
DialogBoxParamA
GetDlgItemTextA
GetParent
GetWindowTextLengthA
GetWindowTextA
IsWindowVisible
EndDialog
GetDlgItem
SendMessageA
EnumWindows
SetDlgItemTextA
SetWindowTextA
MessageBoxA
FindWindowA
GetWindowThreadProcessId
CheckDlgButton
LoadIconA
comdlg32
GetOpenFileNameA
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ