Static task
static1
Behavioral task
behavioral1
Sample
443e03599bb999e146ada4d31ff42f67_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
443e03599bb999e146ada4d31ff42f67_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
443e03599bb999e146ada4d31ff42f67_JaffaCakes118
-
Size
315KB
-
MD5
443e03599bb999e146ada4d31ff42f67
-
SHA1
141009f7f999d90e5463964c59fc52023811f8c9
-
SHA256
9c608afa19a8a9c446f3533afc21514cf5d8ad170c3f99a9db2c8c337013bd87
-
SHA512
2e05a8d40dec00bd7993d7062cb7a4f4d1170165074424c0ea2967cf5958c7e274d96510ba65f03fdf7e40ea65837daf117c86546465f04724a9870b67bef497
-
SSDEEP
6144:qvzhoSr/7WXrUbXZsLdn7wzqmJwE2MfsD3oSz6DxjesHwAzaR:HSb67UrYn74qmJwPMUD3oSyysHwX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 443e03599bb999e146ada4d31ff42f67_JaffaCakes118
Files
-
443e03599bb999e146ada4d31ff42f67_JaffaCakes118.exe windows:4 windows x86 arch:x86
fe431b3dca5ce13d101e5e2d0c0d1d36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetProcAddress
VirtualAlloc
GetModuleHandleA
GlobalLock
GetLastError
VirtualFree
ExitProcess
CreateTimerQueue
PulseEvent
OpenMutexA
HeapFree
CreateEventA
LeaveCriticalSection
TlsSetValue
HeapAlloc
HeapReAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
user32
InSendMessage
PostQuitMessage
RegisterClassA
GetTopWindow
GetDesktopWindow
ole32
CoCreateInstance
CoUninitialize
CoInitialize
psapi
GetWsChanges
msvfw32
DrawDibStart
ICRemove
Sections
.text Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 534KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE