Static task
static1
Behavioral task
behavioral1
Sample
4bf186de045f9725031f882841964649_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4bf186de045f9725031f882841964649_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4bf186de045f9725031f882841964649_JaffaCakes118
-
Size
46KB
-
MD5
4bf186de045f9725031f882841964649
-
SHA1
94eeb46b82b575dd5b8f246eaaccb4d1de3afbb3
-
SHA256
513128c00295ee3af3471a56e487785f125fb8ceda54e682a4cffa0104847810
-
SHA512
c6eac632e8e317d6f163d9254312ee1fa7813ce64182fdb99560e7fde215e059787f2d9e3bd977f5f663e64e8feeff538c0e29a67350867cb07c6acda9dd6be0
-
SSDEEP
768:vFOuQbrjMtfNqWZn3nND1+Me2ZzntWxH/OTY3AKmHJ0H5jdMNPbzR:tOXH2FqWZXNDEMe2NkwKmMjd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bf186de045f9725031f882841964649_JaffaCakes118
Files
-
4bf186de045f9725031f882841964649_JaffaCakes118.exe windows:5 windows x86 arch:x86
49ae628e5ecf313b1cfd76750a77b886
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
CreateFileMappingW
FindNextFileW
lstrcatW
lstrcpynW
GetUserDefaultUILanguage
GetDriveTypeW
CreateMutexW
GlobalUnlock
lstrcmpiW
GetProcessHeap
GetSystemTimeAsFileTime
SetEndOfFile
HeapReAlloc
MapViewOfFile
ResetEvent
GetModuleFileNameA
GetLogicalDrives
GetTempFileNameW
HeapFree
MultiByteToWideChar
DeleteFileW
GetTimeZoneInformation
SetFilePointer
ReleaseMutex
GetVersionExW
ReadFile
GlobalLock
IsBadReadPtr
SetFileTime
CopyFileW
InitializeCriticalSection
FindResourceW
WaitForSingleObject
CreateProcessW
LeaveCriticalSection
GetProcessTimes
lstrcpyW
CloseHandle
GetLocalTime
GetTempPathW
OpenProcess
GetModuleHandleA
GetFileSize
GetComputerNameW
lstrcpyA
SetLastError
FindClose
GetCurrentProcessId
CreateEventW
FlushFileBuffers
GetSystemTime
WriteFile
WriteProcessMemory
OpenMutexW
EnterCriticalSection
FindFirstFileW
GetCommandLineA
ExpandEnvironmentStringsW
MoveFileExW
lstrlenW
DisconnectNamedPipe
GetTickCount
SetFileAttributesW
SetEvent
GetLastError
HeapAlloc
lstrcmpiA
UnmapViewOfFile
GetFileSizeEx
lstrlenA
SystemTimeToFileTime
GetThreadPriority
CreateThread
GetFileTime
WideCharToMultiByte
GetCurrentThreadId
SetThreadPriority
GetExitCodeProcess
Sleep
lstrcatA
CreateDirectoryW
GetModuleFileNameW
user32
GetWindowThreadProcessId
CharLowerBuffA
DrawIcon
GetKeyState
GetClipboardData
MsgWaitForMultipleObjects
PeekMessageA
OpenDesktopA
Sections
.odmx Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vijcx Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dmxil Size: 7KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ