Static task
static1
Behavioral task
behavioral1
Sample
4875f7eff23c0031db3747e6520d7158_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4875f7eff23c0031db3747e6520d7158_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4875f7eff23c0031db3747e6520d7158_JaffaCakes118
-
Size
392KB
-
MD5
4875f7eff23c0031db3747e6520d7158
-
SHA1
4f09ea531b535bf250cd65396bbb80a7080d51ce
-
SHA256
1106ddd26ecdee5bfac7afea8f811c3c7ba0409604aaf815602087293c6e992b
-
SHA512
5527de7a99cd0c495e30e2ed7ec28d3cb2ddad97c21dfdb83836b6ecce4c2e288e20ca9236e58d8d2c3688acfce1b7e9c76621b8a3d2674ff2dcd927b04329c6
-
SSDEEP
6144:+UiBUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3dm7HO2:egCJibvNYJbxYYgbRke6DBu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4875f7eff23c0031db3747e6520d7158_JaffaCakes118
Files
-
4875f7eff23c0031db3747e6520d7158_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c455e6c134b6659ab26492f96de9f20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
UnmapViewOfFile
FreeConsole
LocalUnlock
SetVolumeMountPointA
HeapDestroy
GetModuleHandleA
GetLastError
ExitProcess
FindResourceA
FreeEnvironmentStringsA
Sleep
SetLastError
TlsGetValue
GetACP
HeapCreate
LoadLibraryExA
FindClose
GlobalFree
CreateMutexA
user32
IsWindow
GetFocus
DispatchMessageA
GetDlgItem
DrawMenuBar
FillRect
CheckRadioButton
GetIconInfo
GetDC
DrawEdge
CopyRect
DefWindowProcW
CallWindowProcA
uxtheme
DrawThemeText
GetThemeSysInt
DrawThemeIcon
DrawThemeEdge
GetThemeRect
clbcatq
SetupOpen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ