Static task
static1
Behavioral task
behavioral1
Sample
4b15a7d85a7184a140eaf2a5505a78a5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b15a7d85a7184a140eaf2a5505a78a5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b15a7d85a7184a140eaf2a5505a78a5_JaffaCakes118
-
Size
572KB
-
MD5
4b15a7d85a7184a140eaf2a5505a78a5
-
SHA1
54cbdcdc6ebb1563ba232de068385b68628effe6
-
SHA256
77bbc0e9b285d2d8fcc87919a6bfae2a0a576fdc6b6dd9172e3849b33b76343f
-
SHA512
23383c2701d944f15b8ff8716fff0555b75117240a6cf6083b34c7526320fee26ab3072d3bf76ab27d4f69b2f5b178ca937381c291838e3df1cf43305f8462cd
-
SSDEEP
6144:5d9wPXVxndHAOZVxndHAi7Vd96PlO16PVd96PB:bonhnL/Fk/8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b15a7d85a7184a140eaf2a5505a78a5_JaffaCakes118
Files
-
4b15a7d85a7184a140eaf2a5505a78a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
6f348f719ae41554b82d77f11d5353e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
CreateProcessA
GetVersionExA
GetCurrentProcess
GetEnvironmentVariableA
GetModuleFileNameA
FreeLibrary
LockResource
FreeResource
LoadResource
SizeofResource
FindResourceA
LoadLibraryA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
FlushFileBuffers
SetStdHandle
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetFileType
ExitProcess
GetSystemDirectoryA
CreateMutexA
GetLastError
SetFilePointer
CreateFileA
CloseHandle
WriteFile
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
HeapSize
TerminateProcess
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
GetVersion
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
GetModuleHandleA
GetStartupInfoA
user32
TranslateMessage
GetMessageA
ShowWindow
SetTimer
DispatchMessageA
RegisterClassExA
GetDesktopWindow
KillTimer
DefWindowProcA
CreateWindowExA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 524KB - Virtual size: 521KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ