Static task
static1
Behavioral task
behavioral1
Sample
471e46c9c6cd5e149dd2ba036dcc13c8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
471e46c9c6cd5e149dd2ba036dcc13c8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
471e46c9c6cd5e149dd2ba036dcc13c8_JaffaCakes118
-
Size
92KB
-
MD5
471e46c9c6cd5e149dd2ba036dcc13c8
-
SHA1
74b22ab02371d970ec8942c6058f132cd7f21bd3
-
SHA256
2e371fa38b3d1d2db1f597dec6818b2d8eebecfae8c1af4d7d4cd7fb393f71d5
-
SHA512
fda0a8caf1f45d4358400181b5a9359ec13bc751557d2ea8c531d744a9dd21dbdd22ff8c235b88229d6dde3ee330b60a6af5aacca7b905bfa4846ef36aeebb03
-
SSDEEP
768:DpGDHeG1kU3GZ6ftCn2yNowQOJvIuzSQW5pUpcP1s5Y6LzcNo9p5tv9xZnQFp5JO:DD0kH62jfJvIBUCP1WY60OtlxG/xc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 471e46c9c6cd5e149dd2ba036dcc13c8_JaffaCakes118
Files
-
471e46c9c6cd5e149dd2ba036dcc13c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
df93c5d683e4e2f941a1fedd56db6f58
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItem
SetFocus
LoadIconA
SendMessageA
EndDialog
SetDlgItemTextA
DialogBoxParamA
kernel32
GetCurrentProcessId
FlushFileBuffers
ExitProcess
GetTickCount
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
MultiByteToWideChar
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
ReadFile
HeapSize
CreateFileA
CloseHandle
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vsp Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE