Static task
static1
Behavioral task
behavioral1
Sample
43ef537ac8b1779900dd4447b687a62d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
43ef537ac8b1779900dd4447b687a62d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43ef537ac8b1779900dd4447b687a62d_JaffaCakes118
-
Size
811KB
-
MD5
43ef537ac8b1779900dd4447b687a62d
-
SHA1
52ccf7980e4eefd6a42d28193fd730a03e279891
-
SHA256
c2b5a6e1a2abf80fab87c12fd6d2cdff216ed6283c17bec838094e821a8369d6
-
SHA512
1624ec230558e712a4c4d2e55d5e67b1ba0e95a7e8549bb72d91f2f4cbdcc95d630f66be0869c555d40bd10918c0dbb1a215362d49b188030714d23e7bd60457
-
SSDEEP
24576:72dURrDoYy5I8BUtxA6wk88oAQmXwQSu6u:72URr+CmG88dTS9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43ef537ac8b1779900dd4447b687a62d_JaffaCakes118
Files
-
43ef537ac8b1779900dd4447b687a62d_JaffaCakes118.exe windows:4 windows x86 arch:x86
874ae1991f2fd0c0edebb6879ba51120
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCommMask
HeapCreate
GetOEMCP
GetDriveTypeW
LocalUnlock
GetTickCount
WriteConsoleInputA
CreateThread
GetProfileStringW
GetDiskFreeSpaceW
FlushViewOfFile
SetEvent
OutputDebugStringW
SetTimeZoneInformation
VirtualProtect
SetCommState
FlushFileBuffers
GetStringTypeExA
FormatMessageW
SetErrorMode
CreateEventW
ExitProcess
GetDiskFreeSpaceA
GetPrivateProfileSectionNamesA
AddAtomA
CompareFileTime
ExpungeConsoleCommandHistoryW
user32
ChangeDisplaySettingsExW
OemToCharW
GetClassLongW
MapVirtualKeyExA
UpdateLayeredWindow
SetMenuItemBitmaps
ModifyMenuA
IsDlgButtonChecked
GetDialogBaseUnits
GetWindowPlacement
CreateAcceleratorTableW
SendDlgItemMessageA
CopyIcon
SendIMEMessageExA
PostThreadMessageW
GetClassWord
LoadMenuIndirectW
DdeGetData
RegisterTasklist
RemovePropW
Sections
.text Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE