Static task
static1
Behavioral task
behavioral1
Sample
47e1294869176fb1aa434faaf14c7bfe_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
47e1294869176fb1aa434faaf14c7bfe_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47e1294869176fb1aa434faaf14c7bfe_JaffaCakes118
-
Size
3.7MB
-
MD5
47e1294869176fb1aa434faaf14c7bfe
-
SHA1
d4b7c80941254b68dea017b921f05ba5d6ab0fb0
-
SHA256
53f2a4792e47e6c7fdaf863d7df8f610b4cd40814d59c126b89572752db501f7
-
SHA512
640a8b80f655a2385cde74815c733a770dadce4f988f3874cfac329593b30d5c2ec447c02c3bf174bcbecd592c3bf726836edf6baa3831be9f93668c4e3b19a9
-
SSDEEP
98304:objjwy/8+7zt4sMhAKNkVJ7+SCEfJFCU76bheLsBy1C:oTwy/z4sMhABTeEPu1eIwC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47e1294869176fb1aa434faaf14c7bfe_JaffaCakes118
Files
-
47e1294869176fb1aa434faaf14c7bfe_JaffaCakes118.exe windows:4 windows x86 arch:x86
7886aa23e9e3307f0e5dd0358732e076
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FrameRect
SetWindowContextHelpId
GetMenuStringW
UnregisterClassA
SendInput
UnregisterDeviceNotification
SetMenuInfo
DefDlgProcW
GetUserObjectInformationA
GetWindowRgn
MapVirtualKeyW
OpenWindowStationW
BroadcastSystemMessageW
GetDlgItemTextA
ChangeDisplaySettingsExA
SystemParametersInfoW
ChangeDisplaySettingsA
SetRect
GetKeyboardType
VkKeyScanW
SetKeyboardState
GetMessageA
kernel32
GetThreadContext
WritePrivateProfileStringA
VirtualLock
ReadConsoleOutputA
EnumResourceNamesA
GetCPInfo
SetProcessShutdownParameters
GlobalFindAtomW
LocalAlloc
GlobalAddAtomA
GetBinaryTypeW
EnumCalendarInfoA
SetConsoleCursorPosition
TryEnterCriticalSection
DosDateTimeToFileTime
ExitProcess
GetTempFileNameA
GetNumberFormatW
EnumSystemCodePagesA
UnmapViewOfFile
PeekNamedPipe
lstrcpynA
SetHandleCount
GetSystemDirectoryW
SetFileAttributesA
SetCommMask
lstrcmpiW
GetStringTypeExW
CreateIoCompletionPort
GetTapeStatus
_lclose
SetConsoleMode
GetSystemTime
SetProcessWorkingSetSize
SuspendThread
LoadLibraryExW
GetDriveTypeA
GetCommandLineW
GetFileType
GetSystemInfo
SetConsoleActiveScreenBuffer
IsBadReadPtr
WriteConsoleOutputW
GetACP
VirtualFree
_lopen
ReleaseMutex
VirtualQueryEx
GetThreadPriority
CreateWaitableTimerA
ws2_32
WSAGetLastError
WSALookupServiceNextW
WSASetLastError
shutdown
sendto
gdi32
CreatePenIndirect
SetPolyFillMode
GetTextCharsetInfo
SetBitmapDimensionEx
EqualRgn
SetDIBColorTable
msvcrt
vswprintf
_errno
_write
_mbsstr
_wctime
isspace
_lseeki64
fflush
setlocale
_eof
_mbstrlen
_fstat
_i64tow
_strrev
_mbsupr
setbuf
_mbsicmp
_wcsrev
_stricmp
_chdrive
fputws
realloc
_isctype
_cwait
_putenv
calloc
_wcslwr
Sections
.text Size: 18KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ