Static task
static1
Behavioral task
behavioral1
Sample
4bf209797d645f7ab059de183618efa5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4bf209797d645f7ab059de183618efa5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4bf209797d645f7ab059de183618efa5_JaffaCakes118
-
Size
335KB
-
MD5
4bf209797d645f7ab059de183618efa5
-
SHA1
03b5a22d94b9b8297584d421797dea89fd4422b4
-
SHA256
78df9c7e9d6d174b5ba7c4c574da3b0956c6a3b2fe989c3c8e305a54db9bb790
-
SHA512
cc21c340ee3cc3cdfa15229b7b8ab60b5333a0a5be23a0b102f94a4c45f78a269f32145b3afb2c5579faf62e74e8f778db683eca50ab876143a3bf03c01aee60
-
SSDEEP
6144:gJwNdBlSOCyQfmKmEQ1qY7wRK60JqMIIdAgdw1O8+UGBxpR5f/:gJEP/CybBD1TgK60JNTIO4Sp3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bf209797d645f7ab059de183618efa5_JaffaCakes118
Files
-
4bf209797d645f7ab059de183618efa5_JaffaCakes118.exe windows:4 windows x86 arch:x86
11c7b51a61c2bff689574171a3cd5a05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GdiComment
Escape
CopyEnhMetaFileW
CombineTransform
AngleArc
ExtEscape
CreateDCW
DeleteObject
CreateDCA
Arc
CreateDiscardableBitmap
CopyMetaFileW
EndDoc
kernel32
GetProcAddress
CopyFileA
GetLastError
GetTickCount
GetCurrentThreadId
GetCurrentProcess
GetVersion
GetCommandLineA
VirtualAlloc
DeleteFileA
GetCurrentProcessId
GetModuleHandleA
GetStartupInfoA
winspool.drv
AddFormA
DeletePrinterDataExA
EnumPrinterKeyA
ClosePrinter
AddPrinterConnectionA
DeletePrinterDataA
DeletePrinterKeyA
DeletePrinter
ConfigurePortA
AbortPrinter
DeletePrinterConnectionA
DeleteFormA
ConnectToPrinterDlg
AddJobA
AdvancedDocumentPropertiesA
msvcrt
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdhwc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ