Static task
static1
Behavioral task
behavioral1
Sample
43f782bd8e6871bd796082f3e3611f41_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43f782bd8e6871bd796082f3e3611f41_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43f782bd8e6871bd796082f3e3611f41_JaffaCakes118
-
Size
315KB
-
MD5
43f782bd8e6871bd796082f3e3611f41
-
SHA1
710989c3e676d3b5e5d391c4a680a65c7b6ea730
-
SHA256
71d687bc79c01431ba66099baaf49702fee9cabca792f93a5f5c81be972e1e76
-
SHA512
63553fa0260daad73ba9dc9e77efefa5dc4aa6dcbf073ae698b52e55facfd0e21ebe53cc6163a8963f1ebadc87a7c268a26b7794b55dc8a407e813354f8976a8
-
SSDEEP
6144:/01iIyBkHQC3+vBVqhHVLgJpGO/5rdV5dahCfiwgZWDcoNo7R3EyiI4ate6PN:/0IIyaQC3OBVa9gJ0OpRd3RgOM3EOVp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43f782bd8e6871bd796082f3e3611f41_JaffaCakes118
Files
-
43f782bd8e6871bd796082f3e3611f41_JaffaCakes118.exe windows:4 windows x86 arch:x86
8d32cc7fc9984a32463bf51e7d0b7c6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetProcAddress
IsBadCodePtr
VirtualAlloc
GetModuleHandleA
GlobalLock
GetLastError
VirtualFree
PulseEvent
ExitProcess
HeapFree
GetEnvironmentStrings
OpenMutexA
CloseHandle
GetFileAttributesA
GetPriorityClass
lstrcatA
HeapAlloc
HeapReAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
user32
SendMessageA
GetTopWindow
shell32
DuplicateIcon
ole32
CoCreateInstance
CoInitialize
psapi
GetProcessMemoryInfo
msvfw32
ICClose
ICOpen
DrawDibStart
Sections
.text Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 534KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE