Static task
static1
Behavioral task
behavioral1
Sample
47f132f52dfdc206b6083b26fcaef6d0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47f132f52dfdc206b6083b26fcaef6d0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47f132f52dfdc206b6083b26fcaef6d0_JaffaCakes118
-
Size
427KB
-
MD5
47f132f52dfdc206b6083b26fcaef6d0
-
SHA1
a34c4213e876de3819294a0d0d89774591b15196
-
SHA256
981663aba5e78e4a560b4930f8f0c43637e10f7d54072e25fba422776cced6c8
-
SHA512
1b97239e53b75e9730cf5865820697fe81f8b54b6c2e9fe7d9bbffbd5845998d0a7ad474593e4651dfef04f3f0e554a57f257d743547b2170767296950b81c6d
-
SSDEEP
6144:hcwuO3NYDsNAdnQWMAN6l5yjiqXRZtWpfvxs5kiha0Al3EsRy2LaQt:hc7O3N50BMukyHgG51A5WQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47f132f52dfdc206b6083b26fcaef6d0_JaffaCakes118
Files
-
47f132f52dfdc206b6083b26fcaef6d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
d308c98f15c4ca0d723d3a83c3f28d59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetDriveTypeA
VirtualProtect
LockResource
RaiseException
GetLastError
LoadLibraryExA
GetLocaleInfoA
GlobalAddAtomA
Sleep
InterlockedExchange
EnterCriticalSection
GetACP
FoldStringA
CloseHandle
GlobalDeleteAtom
GlobalUnlock
GlobalFree
SetErrorMode
GetStdHandle
SetConsoleCP
user32
GetClassNameA
ShowWindow
DrawEdge
GetParent
ValidateRect
GetMenuItemInfoA
GetCursorPos
SetForegroundWindow
GetFocus
BeginPaint
ClipCursor
ReleaseDC
DrawTextA
CharToOemBuffA
IsIconic
EndPaint
GetWindowTextA
GetActiveWindow
GetWindow
version
VerQueryValueA
GetFileVersionInfoA
VerFindFileA
VerInstallFileA
GetFileVersionInfoSizeA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ