Static task
static1
Behavioral task
behavioral1
Sample
4bf165a7b53892766769f92f57fc6c49_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4bf165a7b53892766769f92f57fc6c49_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4bf165a7b53892766769f92f57fc6c49_JaffaCakes118
-
Size
170KB
-
MD5
4bf165a7b53892766769f92f57fc6c49
-
SHA1
d13d8cd2f6f1eb46bc4e953007bfb309927f7d37
-
SHA256
88d699924757bf56e1c5a9646b890ada4108c46d874e350c3f91d4e162a5e7d8
-
SHA512
53fd1e306e86b1db0609c3db2c8076aeee396b0178eebd729a1319a30dea633d18618835eefd4dc16f262d56aeff21c43ddc137fac7668a9a0745e472c2924f3
-
SSDEEP
3072:DMSZy//lD2NTzSf9nrRgvoJVvjQePaXZpI8kilSs6nFGU4HuVKf/B6Zo:a//lSMKuVrQJXjkiQFGUeMk7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bf165a7b53892766769f92f57fc6c49_JaffaCakes118
Files
-
4bf165a7b53892766769f92f57fc6c49_JaffaCakes118.exe windows:4 windows x86 arch:x86
11f4390bc511a338281a45fbeb06f16b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
LoadLibraryA
GetStartupInfoA
ExitThread
GetCurrentProcess
CloseHandle
FreeLibrary
GetPriorityClass
GetModuleHandleA
GetModuleFileNameA
GetCurrentProcessId
GetCurrentThreadId
GetThreadPriority
VirtualAlloc
GetCommandLineA
GetProcessHeap
ExitProcess
GetLastError
GetProcessTimes
GetTickCount
GetCurrentThread
user32
GetDC
GetClassLongA
ShowWindow
GetWindowLongA
GetWindowTextA
GetWindow
GetFocus
BeginPaint
GetWindowDC
GetForegroundWindow
GetWindowTextLengthA
GetActiveWindow
GetSystemMetrics
IsWindowVisible
RegisterClassA
ReleaseDC
OpenIcon
CreateWindowExA
UpdateWindow
advapi32
RegCloseKey
GetUserNameA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
IsTextUnicode
version
VerLanguageNameA
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE