Static task
static1
Behavioral task
behavioral1
Sample
4410d673fb0995d24751b1704e207942_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4410d673fb0995d24751b1704e207942_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
4410d673fb0995d24751b1704e207942_JaffaCakes118
-
Size
238KB
-
MD5
4410d673fb0995d24751b1704e207942
-
SHA1
7933f3e8db7a0ab6d6198e70709ae2a7deae6df7
-
SHA256
2d916ebfad7020e78e2a031dc4603783d702d4e20606e8dee193103579908f98
-
SHA512
0aca81d1ce8951022912d47842b131d52177adb14cef2993deee75657f42e510602b7be0abab3b06047379350c64fb8dffc45299f6cb4bc61a6e0f3fe0534f0a
-
SSDEEP
1536:1LYd6cuDYKe1rFJdrEgCVTHnTkM2TClRgumqEqEwZ:ydVuMK8P7+nTkM2Ta33LN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4410d673fb0995d24751b1704e207942_JaffaCakes118
Files
-
4410d673fb0995d24751b1704e207942_JaffaCakes118.exe windows:4 windows x86 arch:x86
e5a27fddcaf14dc5145828ad9fbd209f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
RestoreDC
GetRgnBox
CreateBrushIndirect
SelectObject
GetClipBox
BitBlt
CopyEnhMetaFileA
GetBitmapBits
user32
MessageBoxA
GetActiveWindow
GetCursor
ole32
StgCreateDocfileOnILockBytes
CoCreateGuid
CoUninitialize
WriteClassStm
StringFromIID
CLSIDFromProgID
OleRegGetUserType
kernel32
MulDiv
GetFileAttributesA
GetProcAddress
GlobalAlloc
GetTickCount
ReadFile
VirtualAlloc
VirtualAllocEx
FindResourceA
GetStdHandle
lstrcmpA
SetLastError
WideCharToMultiByte
ExitThread
GetDiskFreeSpaceA
LoadLibraryA
GetFileType
comctl32
ImageList_GetBkColor
ImageList_Write
ImageList_DragShowNolock
ImageList_Draw
ImageList_Create
ImageList_Read
ImageList_Destroy
ImageList_Add
version
GetFileVersionInfoSizeA
Sections
CODE Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ