Static task
static1
Behavioral task
behavioral1
Sample
4b878dd3c1f63e889cbe88606bf621a9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b878dd3c1f63e889cbe88606bf621a9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b878dd3c1f63e889cbe88606bf621a9_JaffaCakes118
-
Size
932KB
-
MD5
4b878dd3c1f63e889cbe88606bf621a9
-
SHA1
f818904e53891d779ac30c92fe8768738c27ee75
-
SHA256
6de6b278a5f960830f4848ae2b50d3fc5d5a25364aa05911021397da812f9cf1
-
SHA512
c36720b976040bc59d39af51d6e2f0ceb63bc57e0aeab466539e647884af0afea611a3461004599ae2df6e8adb85709e629e332c5e90bae640ce8ac753f7cd4c
-
SSDEEP
24576:KGw7IjthC8r06ZkuBakMxfBqaCdMRkwtqpR5Hwhu:KGjB02zMh8vw05Qhu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b878dd3c1f63e889cbe88606bf621a9_JaffaCakes118
Files
-
4b878dd3c1f63e889cbe88606bf621a9_JaffaCakes118.exe windows:5 windows x86 arch:x86
e830e9e153cef1fc22570b84dc1be4b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetVolumeInformationW
ReadFile
lstrlenW
GetEnvironmentVariableA
GlobalAlloc
GetLogicalDrives
GetModuleHandleA
ExitProcess
SetFilePointer
lstrcpynW
LoadLibraryExA
GetDriveTypeW
GetPrivateProfileIntA
lstrcpynA
GetModuleFileNameA
GetTickCount
GetPrivateProfileStringA
lstrlenA
FreeLibrary
CreateFileA
SetErrorMode
user32
DestroyMenu
CharNextA
TrackPopupMenu
CharNextW
RegisterClassA
RegisterWindowMessageA
InsertMenuItemW
DefWindowProcA
GetCursorPos
GetAsyncKeyState
LoadImageA
InsertMenuItemA
CreateWindowExA
CreatePopupMenu
SetForegroundWindow
PostQuitMessage
GetMessageA
FindWindowA
DestroyIcon
MessageBoxA
EnableMenuItem
DestroyWindow
GetWindowTextW
SendMessageA
LoadStringW
SetMenuDefaultItem
DispatchMessageA
msvfw32
DrawDibProfileDisplay
ICRemove
advapi32
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
shlwapi
StrToIntA
PathFileExistsA
shell32
ShellExecuteA
Shell_NotifyIconW
SHGetSpecialFolderPathA
Sections
.text Size: 516KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 405KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ