Static task
static1
Behavioral task
behavioral1
Sample
4222b8d3aa9504dc948c57812c4c7ffd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4222b8d3aa9504dc948c57812c4c7ffd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4222b8d3aa9504dc948c57812c4c7ffd_JaffaCakes118
-
Size
195KB
-
MD5
4222b8d3aa9504dc948c57812c4c7ffd
-
SHA1
3897187199fb3b7b2410524e7c2c62a91e98abb9
-
SHA256
c88c61dd8cd90e78c19375f360115734863b6db3620504efda077577961f2e6a
-
SHA512
4c06a4dbed24f8416c3f953146c2de1af9b3752731afea11e5e3182b4e289a6c0a49b44d711fc57f88af3b045922c9d8d4b104eea74954e5a2079c53a3b07074
-
SSDEEP
3072:6Rq1JosJsLJePGC7MhloZfDCV57dGwbULzF/JXFRo1OGwKzoUr2M:6RQcUMbOf2fMQULZ/JXgHzJr2M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4222b8d3aa9504dc948c57812c4c7ffd_JaffaCakes118
Files
-
4222b8d3aa9504dc948c57812c4c7ffd_JaffaCakes118.exe windows:4 windows x86 arch:x86
23b1e170c0a9731075dd0c91bdab1f98
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
TlsGetValue
LocalAlloc
GetPriorityClass
LocalHandle
VirtualAlloc
TlsFree
GetStdHandle
GlobalFindAtomA
LoadResource
CompareStringA
ReleaseMutex
GetProcessHeap
GlobalFree
GetOEMCP
GlobalLock
CreateThread
GetModuleHandleA
GlobalFlags
GetUserDefaultLangID
OpenSemaphoreA
user32
ReleaseDC
GetWindow
GetWindowTextLengthA
DrawEdge
GetClassInfoExA
GetParent
GetWindowTextA
GetActiveWindow
GetFocus
GetClassNameA
GetDC
RegisterClassA
CloseWindow
BeginPaint
GetForegroundWindow
EndPaint
ValidateRect
IsIconic
ShowWindow
shell32
SHChangeNotify
SHGetMalloc
SHGetFileInfoA
SHGetFolderPathA
SHBrowseForFolderA
userenv
GetGPOListA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ