Static task
static1
Behavioral task
behavioral1
Sample
4223a43b972f3dbc837b25505a2d9f3c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4223a43b972f3dbc837b25505a2d9f3c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4223a43b972f3dbc837b25505a2d9f3c_JaffaCakes118
-
Size
91KB
-
MD5
4223a43b972f3dbc837b25505a2d9f3c
-
SHA1
db52e3002bbbac329aa4ca90de20a70eada0fdbc
-
SHA256
495725501dbbda7fe12ef264071aac7646037af562704e557f83eaa735b7547e
-
SHA512
88a4bf3fe083b09032e7f98d3c79b1d6015471f584b2d41550ec967adfef8ed539e6187c423bc1625cc4499adbd97fac3237664615922b8d5227ec7f9f3178d5
-
SSDEEP
1536:ULThtrobZYvBsVx6caJacMlLPITWTQ4B2DMpjOmj5GVrSaOUpf9h9RZ:ULTDrEVsLacsLPITWT7BoQOe5G1OUJ9X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4223a43b972f3dbc837b25505a2d9f3c_JaffaCakes118
Files
-
4223a43b972f3dbc837b25505a2d9f3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f6b36fb11450bc5c7c2beb648dfd53f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateSolidBrush
CreatePalette
CreatePenIndirect
CreateCompatibleBitmap
GetCurrentPositionEx
CreateDIBSection
SetTextColor
ExcludeClipRect
CreateHalftonePalette
GetClipBox
RestoreDC
GetPixel
GetBrushOrgEx
CreateBrushIndirect
CreateFontIndirectA
GetBitmapBits
DeleteObject
CreateBitmap
CreateCompatibleDC
ExtTextOutA
GetPixel
GetDCOrgEx
DeleteDC
CreateDIBitmap
kernel32
GetCommandLineA
GetFileTime
CreateProcessA
ExitThread
OpenFile
ReadConsoleA
GetCPInfo
DeleteFileA
GetFileSize
FindAtomA
GlobalFree
FindFirstFileA
GetComputerNameA
ReadFile
CreateThread
WriteFile
GetLastError
OpenFileMappingA
DeleteAtom
GetStdHandle
DeleteFileW
SetLastError
Sleep
GetConsoleMode
comctl32
ImageList_LoadImageW
InitCommonControls
ImageList_Draw
MenuHelp
CreateToolbarEx
ImageList_Destroy
ImageList_Add
ImageList_Create
ImageList_EndDrag
ImageList_DragEnter
ImageList_GetIcon
CreateMappedBitmap
ImageList_GetIconSize
DrawStatusTextW
DllGetVersion
ImageList_DrawEx
CreateToolbar
CreateStatusWindowW
CreateStatusWindow
DrawStatusText
ImageList_LoadImageA
ImageList_Copy
ImageList_AddIcon
CreateUpDownControl
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 29.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ