Static task
static1
Behavioral task
behavioral1
Sample
4a65c5b7a963c6bc64d420e690e1601d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a65c5b7a963c6bc64d420e690e1601d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a65c5b7a963c6bc64d420e690e1601d_JaffaCakes118
-
Size
105KB
-
MD5
4a65c5b7a963c6bc64d420e690e1601d
-
SHA1
a928756d2ad71ccc8798616b68d43257cff30fe1
-
SHA256
9129caf085badcdd4bafc96ecc4909c03a0a4628b046f98e66c6c53c676dc051
-
SHA512
09a12c5294c1f33101f0fdd6c07232f7fa71ef03ff1756d99b83d1b31c8248d65347cc063340099b0e20fe0187f9e2eedb119b569f07d0b7d883b275781e007f
-
SSDEEP
1536:mqGHzU8HlmI2+cPxgdnNH3MqV5PDdGmajxzoXQ7rP9uislbouX/Rp8tkDVHO:mqOzjF2+cYN5PhGmattNuiuMe5YkRHO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a65c5b7a963c6bc64d420e690e1601d_JaffaCakes118
Files
-
4a65c5b7a963c6bc64d420e690e1601d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c879e1bd2779e934d3bd5554047f9702
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProfileIntA
TlsGetValue
HeapWalk
GetStdHandle
GetModuleHandleA
WaitForSingleObject
InterlockedExchange
FindAtomA
GetConsoleCP
GetVersion
GetTickCount
CloseHandle
HeapReAlloc
VirtualProtect
GetAtomNameA
GetACP
lstrlenA
LoadLibraryA
CompareFileTime
TlsFree
GlobalUnlock
user32
TranslateMessage
DialogBoxParamA
UpdateWindow
InflateRect
GetMenuStringA
DestroyMenu
SubtractRect
SetPropA
ModifyMenuA
DispatchMessageA
LoadIconA
MessageBoxA
InsertMenuA
CreateCaret
GetMenu
PaintDesktop
GetDlgItem
PostMessageA
ShowWindow
GetWindowTextA
EnableScrollBar
GetKeyboardLayout
EqualRect
CopyRect
SetWindowPos
msi
MsiEnumProductsA
MsiCloseHandle
MsiDoActionA
MsiEnumClientsA
MsiGetMode
ws2_32
WSAAccept
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ