Static task
static1
Behavioral task
behavioral1
Sample
4a47dbc29eebea86c7a77b99a5d4c072_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
4a47dbc29eebea86c7a77b99a5d4c072_JaffaCakes118
-
Size
40KB
-
MD5
4a47dbc29eebea86c7a77b99a5d4c072
-
SHA1
66b85f7a4a44035135c69a5f03b1e63d42bc4367
-
SHA256
6347079a0be4b8f0539a6ff9e911a761a30215270750ce347ab3f3688f9d8717
-
SHA512
45e41070a00ce85b6e2a5ca733275d6e1a5cca4898f76803a03230ade47b0582d0b550f6e8a36e48fb7dac9b8eede6905ba500e51c054f561800a941110cc584
-
SSDEEP
768:Emud5D+3DhONo+eO5iB9KPmEJlwBg1Eof:Ud5q3lONAODmk+1o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a47dbc29eebea86c7a77b99a5d4c072_JaffaCakes118
Files
-
4a47dbc29eebea86c7a77b99a5d4c072_JaffaCakes118.exe windows:4 windows x86 arch:x86
ae778a9901bc02302296d947a0f1ab67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
FindClose
FindNextFileA
CopyFileA
MoveFileA
Sleep
CreateThread
WaitForSingleObject
CreateSemaphoreA
WinExec
GetSystemDirectoryA
GetWindowsDirectoryA
GetCommandLineA
CompareStringW
CompareStringA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
HeapFree
GetProcAddress
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEnvironmentVariableA
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE