Static task
static1
Behavioral task
behavioral1
Sample
4534e8a0f7a792b3a450643c894fc8ec_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4534e8a0f7a792b3a450643c894fc8ec_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4534e8a0f7a792b3a450643c894fc8ec_JaffaCakes118
-
Size
330KB
-
MD5
4534e8a0f7a792b3a450643c894fc8ec
-
SHA1
ae2ce6e6d4139e6922ad730f808c7e2f88d4f3f2
-
SHA256
f58676b4ff2b405da2d1d3eadc0dfd2ac727dbe0462adb284fd2d8de0a4f605d
-
SHA512
d36068cc9005dba7f6bd5d6d08809e6945289efa6a11e8ae1ee71bcf6ab496a220849698c7fb027832595989d4e037d2f1f1b65fa453cb9b1b323a8bd11e9249
-
SSDEEP
6144:UpWanElPA8j3tyE5wCE6dMBVyFt5lJAc72xXdkaksxwlKybaxXV:UpWvLyhGd86oT+TexXV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4534e8a0f7a792b3a450643c894fc8ec_JaffaCakes118
Files
-
4534e8a0f7a792b3a450643c894fc8ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
8a14fc900b97a3a1c249ac4e312260fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
VirtualProtect
GetModuleHandleA
GlobalUnlock
HeapCreate
HeapReAlloc
WaitForSingleObject
SuspendThread
WaitForMultipleObjects
CloseHandle
AddAtomA
InterlockedExchange
CompareFileTime
lstrlenA
LoadLibraryExA
GetVersion
GetProfileIntA
GetSystemDefaultLangID
GetStdHandle
GetCommandLineA
GetTickCount
user32
GetKeyboardLayout
IsDialogMessage
EnableScrollBar
InsertMenuA
CreateCaret
DialogBoxParamA
SubtractRect
GetDlgItem
TranslateMessage
PaintDesktop
CreateCursor
GetKeyState
EqualRect
MessageBoxA
GetMenuStringA
ModifyMenuA
SetPropA
DestroyMenu
DrawCaption
PostMessageA
SetWindowPos
FindWindowA
CopyRect
GetWindowTextA
DispatchMessageA
netapi32
DsRoleFreeMemory
DsGetDcOpenA
DsGetDcNameA
DsRoleCancel
DsGetDcNextA
dnsapi
DnsStatusString
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ