Static task
static1
Behavioral task
behavioral1
Sample
47e5307b0421c247bbdfa9e891142467_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47e5307b0421c247bbdfa9e891142467_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47e5307b0421c247bbdfa9e891142467_JaffaCakes118
-
Size
637KB
-
MD5
47e5307b0421c247bbdfa9e891142467
-
SHA1
baf9ef16c4d7eec98e48165dcfd5ea51534e2f86
-
SHA256
966f6c89c31121f20ac4001d0675659bdaaba83e95446124faa145ad235c98d1
-
SHA512
2337d6a3f8d72df562a7cc444e33d408083e981b3449a4339569cbc944d9d2fd9811ad536f43e7bea01d172a3fbb7eef7081144b6b2d817d16ea40acde71231c
-
SSDEEP
12288:wayWFNcU2j2IK66uxQf0XCFo20551DfE2RRU/pGV44Vg69MwbO+kPzd1lHYi0myu:rFNcrj2INQf0XCypfE2fUkg6vbKd3Y+b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47e5307b0421c247bbdfa9e891142467_JaffaCakes118
Files
-
47e5307b0421c247bbdfa9e891142467_JaffaCakes118.exe windows:4 windows x86 arch:x86
53e9b805d32611f2119f952f3918556e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetCommandLineA
GetSystemDefaultLangID
InterlockedExchange
GetAtomNameA
SetConsoleCP
GlobalUnlock
GetVersion
GetTickCount
WaitForSingleObject
VirtualProtect
GetModuleHandleA
GetStdHandle
CompareFileTime
SuspendThread
GetConsoleCP
CloseHandle
LoadLibraryExA
lstrlenA
HeapReAlloc
WaitForMultipleObjects
user32
SetWindowPos
FillRect
DrawCaption
GetKeyboardLayout
GetDlgItem
SetPropA
GetCursorInfo
DispatchMessageA
DialogBoxParamA
DestroyMenu
CreateMenu
GetKeyState
InvertRect
CopyImage
FindWindowA
DragObject
SetScrollInfo
InsertMenuA
IsDialogMessage
CreateIcon
EnableScrollBar
advapi32
RegCloseKey
RegEnumKeyA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ