Static task
static1
Behavioral task
behavioral1
Sample
4561a89bd5c02f1c64d85384d1cfab1b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4561a89bd5c02f1c64d85384d1cfab1b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4561a89bd5c02f1c64d85384d1cfab1b_JaffaCakes118
-
Size
32KB
-
MD5
4561a89bd5c02f1c64d85384d1cfab1b
-
SHA1
87e5e85e0e7df037fc24aeb3c361e2083c076a51
-
SHA256
5289dcd5ac0fd7f163d2872971b7961dc9d8b228cbb13f06b8092f84fcaae689
-
SHA512
07e467a939e4a6b918595919273be2ed1ebbd258d11618d187cb8968362ccce5dd91e24e7b4bb25c1447d6dd4172efbf6a8185b06a49a98e968135cb45204e5a
-
SSDEEP
384:ZnREj0zsiFEy4bCna36FSTN611fV3B108V4P:cjWTFEDCaK881fJB108V8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4561a89bd5c02f1c64d85384d1cfab1b_JaffaCakes118
Files
-
4561a89bd5c02f1c64d85384d1cfab1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
94afa82f024c7637eb5d4d6adf307640
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetGetCookieA
mfc42
ord3079
ord4080
ord4622
ord4424
ord614
ord2625
ord2623
ord290
ord4226
ord2486
ord4003
ord800
ord535
ord2764
ord537
ord1574
ord2818
ord540
ord4202
ord3825
ord939
ord860
ord665
ord1140
ord1979
ord5442
ord5572
ord353
ord2915
ord2393
ord690
ord1988
ord6385
ord5207
ord389
ord3262
ord3579
ord3831
ord1113
ord3258
ord1114
ord3830
ord2976
ord2985
ord3136
ord4465
ord3259
ord3147
ord2982
ord1799
ord825
ord823
ord858
ord3237
msvcrt
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
rand
time
srand
__CxxFrameHandler
_mbscmp
_CxxThrowException
__getmainargs
kernel32
LocalFree
InterlockedDecrement
DeleteFileA
CreateMutexA
OpenMutexA
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleHandleA
GetStartupInfoA
GetLastError
MultiByteToWideChar
lstrlenA
lstrlenW
user32
GetMessageA
DispatchMessageA
TranslateMessage
GetForegroundWindow
ole32
CoCreateInstance
CoInitialize
OleRun
oleaut32
SysAllocString
VariantClear
VariantInit
SysFreeString
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE