Static task
static1
Behavioral task
behavioral1
Sample
4954d0a28a9d9eee4763301e5eaccaeb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4954d0a28a9d9eee4763301e5eaccaeb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4954d0a28a9d9eee4763301e5eaccaeb_JaffaCakes118
-
Size
21KB
-
MD5
4954d0a28a9d9eee4763301e5eaccaeb
-
SHA1
005b49c7339d24723e8731aa717b2b005a6cfbf8
-
SHA256
d817853ec9646233f884726b8951d3083867efa1bf62f2126de75a884d43575d
-
SHA512
23fc719eb5c913b6ae5ccc08f3462b5bc9a3c80bb58cc09f5e0c4cee51552407b6e92dc0c7396d6a6d6e0afb4afce3eb7e268d03a1ec8fec8080cec3cfade1e8
-
SSDEEP
384:oM8DA35h8MF8atIuZ+3fMMNrsU5UgjKODd0PWpiy9mut3S+Nl8q93Ff19NJ543gp:oLDA359FPtGfMirs9gus+PWADuk+PT9N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4954d0a28a9d9eee4763301e5eaccaeb_JaffaCakes118
Files
-
4954d0a28a9d9eee4763301e5eaccaeb_JaffaCakes118.exe windows:47505 windows x86 arch:x86
b469317080a392d8ac5730571520f1e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
HeapReAlloc
HeapDestroy
GetTickCount
GetStartupInfoA
LocalAlloc
DeleteCriticalSection
LoadLibraryA
SetFilePointer
GetCurrentProcess
lstrcmpiW
LoadLibraryA
GetSystemTimeAsFileTime
LoadLibraryA
GetCurrentProcessId
InterlockedDecrement
GetTickCount
VirtualAlloc
GetModuleHandleW
GetModuleFileNameA
ReadFile
GetModuleHandleW
GetProcAddress
SetLastError
GetProcAddress
lstrcpyW
GetCurrentThreadId
EnterCriticalSection
GetTickCount
FreeLibrary
GetCommandLineW
InterlockedIncrement
VirtualAlloc
SetLastError
GetLastError
InitializeCriticalSection
GetCurrentProcess
WriteFile
user32
GetSubMenu
CopyRect
GetDesktopWindow
GetSystemMetrics
GetWindowLongW
EndDialog
EndDialog
GetSubMenu
DispatchMessageW
PostMessageW
GetWindow
ShowWindow
SetCapture
GetClientRect
CopyRect
GetWindowTextW
CopyRect
DestroyMenu
SetRect
DialogBoxParamW
RegisterClassW
wsprintfW
GetClientRect
PtInRect
InvalidateRect
GetSystemMetrics
DispatchMessageA
ReleaseDC
IsDialogMessageW
MoveWindow
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ