Static task
static1
Behavioral task
behavioral1
Sample
4a981c5697a1b154d5f6917f844b0c58_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a981c5697a1b154d5f6917f844b0c58_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a981c5697a1b154d5f6917f844b0c58_JaffaCakes118
-
Size
18KB
-
MD5
4a981c5697a1b154d5f6917f844b0c58
-
SHA1
ac4da3e57a1d8da11b7c1b0d567159584641f151
-
SHA256
c0d6bea242e52481c07fe77e898b0487bb9ed57df9a377fee526a9773bc46a1e
-
SHA512
1dcf5142b4738ec0facf94a1406d7eba7fa40ff91939b050c8384334df3c7764c66b36b5e34f146f8bffc8a5edd8835143de9889d440ed95853151703dfe3517
-
SSDEEP
192:uYLUmU1/bXzW7OW7UEaThksNRPMvpa3FT4/joEtCeIuR4cMFK07lVJTa0qtHWx:txwXzRW7Uvh1NRPMC0/j++uHlVla0zx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a981c5697a1b154d5f6917f844b0c58_JaffaCakes118
Files
-
4a981c5697a1b154d5f6917f844b0c58_JaffaCakes118.exe windows:4 windows x86 arch:x86
ba75f1da4ee17e0d9a044fb80064fc02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatA
IsDebuggerPresent
GetModuleHandleA
GetCurrentThread
GetTapeStatus
LoadLibraryExA
GetCurrentProcessId
GlobalMemoryStatus
WaitForSingleObject
HeapDestroy
GetProcessHeap
GetProcessVersion
HeapCreate
CreateIoCompletionPort
GetACP
GetStdHandle
VirtualProtect
InterlockedExchange
HeapQueryInformation
GetLogicalDrives
GetEnvironmentStringsA
user32
GetTitleBarInfo
GetClassNameA
DrawTextA
FillRect
GetWindow
FrameRect
GetCursorPos
GetWindowTextLengthA
SetForegroundWindow
GetDlgItem
EndPaint
GetParent
ReleaseDC
SetActiveWindow
wsprintfA
BeginPaint
DragDetect
ShowWindow
GetFocus
advapi32
RegFlushKey
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegEnumKeyA
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ