Static task
static1
Behavioral task
behavioral1
Sample
4add46b896697d1b6da171efb1c19ce0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4add46b896697d1b6da171efb1c19ce0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4add46b896697d1b6da171efb1c19ce0_JaffaCakes118
-
Size
12.0MB
-
MD5
4add46b896697d1b6da171efb1c19ce0
-
SHA1
3773a2623ddfaac9ade8790528f3ec555ae2b479
-
SHA256
de86d79f48e5aa45669cce09551b82d9a5bc8059661e99db7928806b815a46be
-
SHA512
681fc5a0607ab346521ced431ff9c20460756649576fe26004db2515420541e351a20c2043225c02b2afb1154395e8b1fa0a4199124aaf9802b189b63036ab94
-
SSDEEP
6144:v04ECj3HuzNjdKYLOhEZaxXZ2HfRrV1n48IDxobM2Z6v:c4Tj3/YLQEQxXZkZ88IdAQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4add46b896697d1b6da171efb1c19ce0_JaffaCakes118
Files
-
4add46b896697d1b6da171efb1c19ce0_JaffaCakes118.exe windows:4 windows x86 arch:x86
65204509011c7e0b09bdcb604feb8b49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesA
GetFileAttributesA
WaitForSingleObject
GetProcAddress
MoveFileA
WaitForMultipleObjects
LoadLibraryA
GetLastError
CreateFileA
DuplicateHandle
GetCurrentThreadId
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
FormatMessageA
CopyFileA
GlobalMemoryStatus
CloseHandle
GetCurrentProcess
lstrlenA
HeapReAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
SetEnvironmentVariableA
user32
RegisterHotKey
GetProcessWindowStation
EnumDesktopsA
GetGUIThreadInfo
CreateMenu
GetWindowLongA
IsClipboardFormatAvailable
EnableMenuItem
GetCursorPos
gdi32
CreateEllipticRgn
CreateCompatibleDC
CreateRectRgn
advapi32
GetSecurityInfo
shlwapi
PathAppendA
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 501KB - Virtual size: 501KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ