Static task
static1
Behavioral task
behavioral1
Sample
43c5c56d035c4eaec21898ff3e6ede7e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43c5c56d035c4eaec21898ff3e6ede7e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43c5c56d035c4eaec21898ff3e6ede7e_JaffaCakes118
-
Size
394KB
-
MD5
43c5c56d035c4eaec21898ff3e6ede7e
-
SHA1
498f91d79a92c1d12371ef01363352fd3d148c0d
-
SHA256
14c82085814cccafab5dae58e46ce43ef83a6c7e6e10f8a253e84be92ffcf6de
-
SHA512
067166dd11da2714c9d7a5485958d8bf3f3867273d2fbe616d9a0c6599da398c294e1ff7f756b5754d657a7314a0af8c36f7d98ac78e6cb035c69f88d3bcba27
-
SSDEEP
6144:KWUKFNBG6AxLhfW2CWEXjnwP3bBcf8Xk64Wh2JQCEwZuGHeoWZX2rpPQMfCJ:KWUKFvG6q1f3WjGQ8063Uh5j0X21QoCJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43c5c56d035c4eaec21898ff3e6ede7e_JaffaCakes118
Files
-
43c5c56d035c4eaec21898ff3e6ede7e_JaffaCakes118.exe windows:4 windows x86 arch:x86
6d40fd66a3c652c2e09675d7197fcc9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
LoadLibraryA
LocalAlloc
GetModuleHandleA
Sleep
LoadResource
GetSystemTime
FindResourceA
GetVersion
SuspendThread
CreateThread
FreeResource
SizeofResource
LockResource
FindResourceExA
VirtualFree
SetLastError
CloseHandle
LocalLock
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetOEMCP
LocalFree
GetProcAddress
VirtualAlloc
GetACP
GetCPInfo
GetLastError
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetStringTypeW
user32
MessageBoxA
IsWindowVisible
FindWindowA
EnableWindow
GetDC
LoadBitmapA
GetDesktopWindow
gdi32
GetObjectA
DeleteObject
ole32
CoUninitialize
avifil32
AVIBuildFilterA
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 324KB - Virtual size: 325KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 417KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ