Static task
static1
Behavioral task
behavioral1
Sample
48f258baf0ecff39911dcdc93d9e73cc_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
48f258baf0ecff39911dcdc93d9e73cc_JaffaCakes118
-
Size
144KB
-
MD5
48f258baf0ecff39911dcdc93d9e73cc
-
SHA1
b0ad634dd1338657af9799f3449a9a41ae77dd64
-
SHA256
e6c755480d644a243e5168b16cad306c0571ceaac75c4ae7525a7ccfd7a2cf6c
-
SHA512
38f17ce3e9d8ec8cf882e4ef4b793e86006e03101d4a1389a154e45fedf30441897d62dbcee3251a31f3846228fff11f15198c8bcf24c49ef3e43d3368c09f50
-
SSDEEP
3072:neoLUlBYbEH8u1PpFk1DOBsj/RtilhY99bDds:KlBYba9zk1DriXYLb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48f258baf0ecff39911dcdc93d9e73cc_JaffaCakes118
Files
-
48f258baf0ecff39911dcdc93d9e73cc_JaffaCakes118.exe windows:5 windows x86 arch:x86
25cb18a362575aab6c31ea27000684a4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCursor
GetAsyncKeyState
IntersectRect
RemovePropA
IsClipboardFormatAvailable
winscard
SCardListCardsA
gdi32
EndPath
clusapi
ClusterResourceCloseEnum
advapi32
AddUsersToEncryptedFile
kernel32
GetVersion
GetSystemTimeAsFileTime
GetConsoleOutputCP
GetConsoleSelectionInfo
FreeConsole
GlobalMemoryStatusEx
GetSystemDefaultUILanguage
EnumSystemLocalesW
UnhandledExceptionFilter
GetCurrentActCtx
msvcrt
memset
mprapi
MprConfigInterfaceGetHandle
rasapi32
RasSetEapUserDataA
oleaut32
VARIANT_UserSize
VarCyFromUI4
pdh
PdhGetFormattedCounterValue
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CODE Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ