Static task
static1
Behavioral task
behavioral1
Sample
470622d4fdd2a9f8735d912e814e80e8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
470622d4fdd2a9f8735d912e814e80e8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
470622d4fdd2a9f8735d912e814e80e8_JaffaCakes118
-
Size
210KB
-
MD5
470622d4fdd2a9f8735d912e814e80e8
-
SHA1
69d8ee60b604e6fc1d8227b76b4486fccd68463a
-
SHA256
9dc38c888d269d13ea5b339055322f61423a046f58bbc4e0ffbb6adad7d7d399
-
SHA512
1cbbcb2668e6bc490350d4707e6f84017275d8b3ce25df043fdf4fb99bc16c4bc12b5fb5d54e9c72fc984a1a8985a9658db39aeb6bdc3c9851f59dfc2de86dec
-
SSDEEP
3072:5d6tDt2KBuErV1Zf4YiMtBpQWZxWluMHNOJg4wV48b4XEtkulxuMi:PGBuErPR4YLB9WluMtOPwV4O5xy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 470622d4fdd2a9f8735d912e814e80e8_JaffaCakes118
Files
-
470622d4fdd2a9f8735d912e814e80e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
768498cd9a365ad31efc686f37adf90d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CallWindowProcA
ClientToScreen
CreatePopupMenu
CreateWindowExA
IsZoomed
MapWindowPoints
MessageBeep
RedrawWindow
SetForegroundWindow
SetPropA
SetScrollInfo
WindowFromPoint
wsprintfA
gdi32
CreateDCA
CreateEnhMetaFileA
CreateHalftonePalette
FillPath
GetClipRgn
GetTextExtentPointA
IntersectClipRect
PtInRegion
SetWindowExtEx
SetWorldTransform
kernel32
DeleteCriticalSection
EnumCalendarInfoA
GetExitCodeProcess
GetFileSize
GetStringTypeExA
GetThreadLocale
HeapCreate
HeapFree
QueryPerformanceCounter
SetEndOfFile
SetThreadLocale
UnhandledExceptionFilter
WideCharToMultiByte
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
G8gushZ4 Size: 2KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE