Static task
static1
Behavioral task
behavioral1
Sample
4214b7b9aebb0d66728a3bd3ca653ed9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4214b7b9aebb0d66728a3bd3ca653ed9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4214b7b9aebb0d66728a3bd3ca653ed9_JaffaCakes118
-
Size
53KB
-
MD5
4214b7b9aebb0d66728a3bd3ca653ed9
-
SHA1
563b977872e864327d3ab5a54f1b53009585eec6
-
SHA256
6ed1bb2ad46cd937c1e6b7eea38a2f6ee801f3577b5c6eaf3ac2757c0a879af6
-
SHA512
e7c7bda13ca08cc6c178c780695f4a51ef3f93aec391c572bdb1c6e3b95c519c4d364d98ae20d2f2f13deac1a0e6ef9b955a4c5f3f6e7c49d425e1d1aa0175f3
-
SSDEEP
384:IovQiYEdTEKf+pSDQctQKHo8nJSH1apMxtXIszP7hSnO/3aaE6Q4VbDy4Q+1co:bpf+pS1/HjJSH1apMxtYS9SnkqWjT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4214b7b9aebb0d66728a3bd3ca653ed9_JaffaCakes118
Files
-
4214b7b9aebb0d66728a3bd3ca653ed9_JaffaCakes118.exe windows:4 windows x86 arch:x86
c7d3886e2d15b96de9a08e10a9e7f69b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetThreadContext
HeapAlloc
lstrlenA
ContinueDebugEvent
WriteProcessMemory
WaitForDebugEvent
lstrcpyA
SetFilePointer
ReadProcessMemory
SetThreadContext
HeapFree
GetLastError
GetStartupInfoA
GetProcessHeap
GetModuleHandleA
GetModuleFileNameA
ReadFile
GetFileSize
ExitProcess
CreateProcessA
CreateMutexA
CreateFileA
comctl32
gdi32
DeleteObject
SetBkMode
SetBkColor
SelectObject
RoundRect
MoveToEx
LineTo
GetStockObject
GetPixel
SetTextColor
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePen
CreateFontIndirectA
CreateFontA
CreateCompatibleDC
CombineRgn
BitBlt
GetObjectA
shell32
ShellExecuteA
user32
WindowFromPoint
TrackPopupMenu
ShowWindow
SetWindowTextA
SetCapture
SetWindowPos
SetWindowLongA
SetMenuInfo
SetDlgItemTextA
SetCursor
SetWindowRgn
ReleaseDC
SendMessageA
ScreenToClient
MessageBeep
ReleaseCapture
MessageBoxA
LoadBitmapA
LoadIconA
LoadCursorA
wsprintfA
GetWindowLongA
GetWindowDC
GetSystemMetrics
GetShellWindow
GetParent
GetMenuInfo
GetDlgItem
GetDlgCtrlID
GetCursorPos
GetClientRect
FillRect
EndPaint
EndDialog
EnableMenuItem
DrawTextA
DrawIconEx
DialogBoxParamA
DestroyMenu
CreateWindowExA
CreatePopupMenu
CallWindowProcA
BringWindowToTop
BeginPaint
AppendMenuA
GetWindowTextLengthA
GetWindowTextA
Sections
code Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE