Static task
static1
Behavioral task
behavioral1
Sample
4a51cfb5c320d7a644c6a5be50d72cff_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a51cfb5c320d7a644c6a5be50d72cff_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a51cfb5c320d7a644c6a5be50d72cff_JaffaCakes118
-
Size
280KB
-
MD5
4a51cfb5c320d7a644c6a5be50d72cff
-
SHA1
08093bdadf206277a321b73034837ff4b5706469
-
SHA256
7d798e2f0b6881c76e18a3b5778cd984b2be7de0cbda932a71e0cdb3b923929f
-
SHA512
25aebbf188b903bac6cec82c4004065b7f77dfeba8e017dab5d241e3b8eb4ab565392bd4e36001f09cf4a43a5a3082cf936c0ea740d1ca3d1ebd67e7908c2465
-
SSDEEP
6144:uG7Aq1l1in6q1Yj7L8awzWiUidGDCVfNx2orerSn3nmt6Q:P1/+IP8awZeCVqoio3nH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a51cfb5c320d7a644c6a5be50d72cff_JaffaCakes118
Files
-
4a51cfb5c320d7a644c6a5be50d72cff_JaffaCakes118.exe windows:5 windows x86 arch:x86
6f482fb8a9bb6fad69099f7b08f8b857
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlAddAce
NtResumeThread
NtSetInformationProcess
ZwIsProcessInJob
ZwSetEvent
ZwProtectVirtualMemory
RtlCompareMemory
ieakpi32
_Toupper
_LDscale
_Mbrtowc
_Snan
_Inf
_FSnan
_FDenorm
_Exp
_LSinh
_LRteps
gdi32
SetWindowOrgEx
GetEnhMetaFileBits
GetObjectType
SetROP2
SetWinMetaFileBits
GetNearestPaletteIndex
ExcludeClipRect
Rectangle
CreateFontIndirectW
StretchDIBits
CombineRgn
SetTextAlign
GetWindowExtEx
CreateCompatibleDC
RealizePalette
CreateDIBSection
CreatePen
GetCurrentPositionEx
CreateFontA
OffsetRgn
GdiFlush
GetBitmapBits
kernel32
FlushInstructionCache
GlobalAlloc
EnterCriticalSection
CloseHandle
GetVersion
GetComputerNameA
TerminateProcess
GetStartupInfoA
GetStdHandle
GetTempFileNameA
MulDiv
GetACP
FormatMessageA
GetPriorityClass
CreateFileW
CompareStringW
GetFileAttributesA
lstrcpynA
GetFullPathNameA
InterlockedDecrement
GetTickCount
GlobalSize
GetLastError
GetModuleHandleA
SleepEx
VirtualFree
LockResource
CopyFileA
FindFirstFileA
lstrcpyA
GetStringTypeExA
SetEndOfFile
GlobalReAlloc
SetThreadPriority
GetThreadLocale
LoadLibraryW
QueryPerformanceCounter
GetVolumeInformationA
TerminateThread
FileTimeToDosDateTime
FindClose
GetFileSize
WideCharToMultiByte
IsValidLocale
CreateMutexA
GetProcAddress
IsValidCodePage
user32
GetScrollPos
GetThreadDesktop
SetWindowsHookExW
GetDoubleClickTime
GetClassLongW
DestroyWindow
PtInRect
GetUserObjectInformationW
SystemParametersInfoW
FlashWindow
ShowCursor
WindowFromPoint
SetWindowPos
ClientToScreen
GetMessageExtraInfo
InflateRect
BeginPaint
GetCapture
DispatchMessageA
PostMessageW
ScrollDC
RegisterClipboardFormatW
DestroyMenu
GetDC
DrawFocusRect
GetClassNameW
GetKeyboardState
GetScrollRange
GetMessageW
SetWindowTextA
MsgWaitForMultipleObjects
UnionRect
EnumClipboardFormats
UpdateWindow
GetKeyboardLayoutList
Sections
.text Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ