Static task
static1
Behavioral task
behavioral1
Sample
4a8b7be56d9caca18479878069567bbb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a8b7be56d9caca18479878069567bbb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a8b7be56d9caca18479878069567bbb_JaffaCakes118
-
Size
110KB
-
MD5
4a8b7be56d9caca18479878069567bbb
-
SHA1
0ac1b373ffb0039798600d3a0775dbc23dcfafb2
-
SHA256
0857a498fddea1341dc610350bec7739ccc96e8380839277ea7cc4c41b6fd32b
-
SHA512
4c01d447b97e56f75726d6f9b7878173af3a41106743a4e42c762e8ef78ecf753b92a64f053a7192f92e57121cdd00c190b6ba1e120353947af87dab3bed9268
-
SSDEEP
1536:6bxJN4FzJEbqySfOb/tFySKD47wk3PJg/c6uNP1v31C8JsONlVE7Np:6FJN4Ibq2eloP+NuNPdXsONlaT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a8b7be56d9caca18479878069567bbb_JaffaCakes118
Files
-
4a8b7be56d9caca18479878069567bbb_JaffaCakes118.exe windows:4 windows x86 arch:x86
3ede871f504dee75b485f08c01cf3ea1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 45KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 45KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE