Static task
static1
Behavioral task
behavioral1
Sample
4a7ef491c4db956facd6026427dc2d54_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a7ef491c4db956facd6026427dc2d54_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a7ef491c4db956facd6026427dc2d54_JaffaCakes118
-
Size
100KB
-
MD5
4a7ef491c4db956facd6026427dc2d54
-
SHA1
57d28595f5ed92409ade23079b37c853bb948fa9
-
SHA256
77afd0d4824b7bdee78ea4ff6fcfdacdace8e668be5bf205fa51b2f762393aba
-
SHA512
63cb1c9361aceed82a8ac9874ee29124857f4b4d282ad3b05311129f24ddb5d0782520b745e2265525cd62e4e318b53635735d1a90709f11c9f0974b6f42165c
-
SSDEEP
1536:89LycnTDeYz5h3nUDgZNhZYPrik10ftD/V72WSIz7eJoQOckjQc5h:6ycuYzvkDgZhgfs1/59SIeJoQsQc5h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a7ef491c4db956facd6026427dc2d54_JaffaCakes118
Files
-
4a7ef491c4db956facd6026427dc2d54_JaffaCakes118.exe windows:5 windows x86 arch:x86
f30afd19f76a3901a818a6534b19b8e1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
HeapFree
lstrlenA
MultiByteToWideChar
GetLastError
CreateMutexA
VirtualFree
VirtualAlloc
WaitForSingleObject
GetCommandLineA
CreateProcessA
lstrcatA
GetModuleFileNameA
ReleaseMutex
CloseHandle
GetVolumeInformationA
FindFirstVolumeA
GetVersionExA
CreateFileW
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
GetStringTypeW
LCMapStringW
LoadLibraryW
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
Sleep
ExitProcess
HeapCreate
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
DecodePointer
EncodePointer
WideCharToMultiByte
VirtualProtect
GetProcAddress
GetModuleHandleW
GetSystemInfo
VirtualQuery
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameW
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
FlushFileBuffers
user32
TranslateMessage
LoadCursorA
DefWindowProcA
ShowWindow
DispatchMessageA
GetMessageA
PostQuitMessage
RegisterClassExA
GetSystemMetrics
SetWindowPos
CreateWindowExA
GetClientRect
KillTimer
GetWindowLongA
GetWindowRect
SetWindowLongA
LoadIconA
SetTimer
UpdateWindow
ole32
OleUninitialize
CoCreateInstance
OleInitialize
oleaut32
SysAllocString
VariantClear
SysAllocStringLen
SysFreeString
shlwapi
PathQuoteSpacesA
StrStrIA
StrStrA
urlmon
CoInternetSetFeatureEnabled
wininet
InternetCloseHandle
InternetOpenA
HttpSendRequestA
FindCloseUrlCache
FindNextUrlCacheEntryA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
DeleteUrlCacheEntry
HttpOpenRequestA
FindFirstUrlCacheEntryA
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ