Static task
static1
Behavioral task
behavioral1
Sample
4881291d420c0a288f09f54afc991dba_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4881291d420c0a288f09f54afc991dba_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4881291d420c0a288f09f54afc991dba_JaffaCakes118
-
Size
527KB
-
MD5
4881291d420c0a288f09f54afc991dba
-
SHA1
80c995a3cb90f724b49201a6e0b7d90698b8ee6c
-
SHA256
a5431a7af9bfcc9554657de870dd2f5f6a77af5f86c932249aaa96ccd0c2b5f5
-
SHA512
8e6469bfb43b805e63a6ff459cf291b2d176f90fbf45f395f546b4bb4833f994b545fc390f93e7defe502b972d0b7bdc5c4ad69b2b9119da134a4d593907d7f8
-
SSDEEP
12288:ZdlyOiNATy1/qKh8C2ZIIlvQZDmdEit9FGzVHUmZ:zlziX/b8TXc5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4881291d420c0a288f09f54afc991dba_JaffaCakes118
Files
-
4881291d420c0a288f09f54afc991dba_JaffaCakes118.exe windows:5 windows x86 arch:x86
d00932f497f685f0a2989757594ff10e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
HeapCreate
CreateProcessA
SizeofResource
InterlockedExchange
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
GlobalFree
lstrlenA
UnmapViewOfFile
LCMapStringW
GetLastError
InterlockedIncrement
GetCurrentThreadId
GetFileType
CreateEventW
RemoveDirectoryA
GetProcAddress
FindNextFileA
FindFirstFileA
CompareStringW
GetProcessHeap
GetSystemInfo
GlobalLock
SetErrorMode
DeleteFileA
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
IsBadWritePtr
GetTickCount
QueryPerformanceCounter
FreeLibrary
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
GetVersion
VirtualFree
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
SetEvent
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
LoadLibraryW
WideCharToMultiByte
SetStdHandle
FreeEnvironmentStringsW
LoadLibraryExW
CreateFileA
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapAlloc
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetStdHandle
TlsSetValue
HeapDestroy
RtlUnwind
Sleep
FindResourceA
VirtualAlloc
SetEndOfFile
GetOEMCP
gdi32
GetDeviceCaps
CreateCompatibleDC
CreateSolidBrush
SetBkColor
user32
InvalidateRect
SystemParametersInfoA
GetSysColor
MessageBoxA
SetDlgItemTextA
EndDialog
SetForegroundWindow
GetDesktopWindow
ScreenToClient
GetDlgItem
GetSubMenu
SetWindowLongA
ReleaseCapture
GetWindowRect
GetSystemMetrics
DispatchMessageA
FillRect
GetWindowLongA
RegisterClassA
EnableMenuItem
LoadStringA
IsWindowEnabled
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetClientRect
SendMessageA
GetDC
IsWindow
SetWindowPos
LoadBitmapA
PostQuitMessage
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 497KB - Virtual size: 497KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ