Static task
static1
Behavioral task
behavioral1
Sample
4b41e42360d20469e369a31a30245eb2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b41e42360d20469e369a31a30245eb2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b41e42360d20469e369a31a30245eb2_JaffaCakes118
-
Size
447KB
-
MD5
4b41e42360d20469e369a31a30245eb2
-
SHA1
ea06f1a1918ec76247cb68c96176adc720de0e47
-
SHA256
0f6f9a7bb75b510109a6d007c444269ce15d5753bd142d46d0cefcc10a020e11
-
SHA512
65b282cf7a75dc89573498d48871720902628b085aaf0e93609e460d6459a46084d341f125651444b443158c1eb328c6d69f4f7e15bb8a093a36e4e1994c8740
-
SSDEEP
12288:UPbfuEyxcT2Pw1HoUh8H7yRWWbQtfP0WiO:UT2HS2n6PAt3D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b41e42360d20469e369a31a30245eb2_JaffaCakes118
Files
-
4b41e42360d20469e369a31a30245eb2_JaffaCakes118.exe windows:4 windows x86 arch:x86
a9b5bdc7b59296561b261cabc99e3e64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
InterlockedDecrement
IsDebuggerPresent
TlsFree
GetProcAddress
IsValidLocale
HeapReAlloc
TlsSetValue
DeleteCriticalSection
GetStdHandle
GetCurrentProcessId
VirtualFree
FindResourceW
GetEnvironmentStringsW
WideCharToMultiByte
GetModuleHandleA
LCMapStringA
WaitNamedPipeA
WriteFile
SetHandleCount
GetLocaleInfoA
HeapDestroy
EnumSystemLocalesA
HeapCreate
MultiByteToWideChar
SetVolumeLabelW
GetStartupInfoA
SuspendThread
GetWindowsDirectoryW
ExitProcess
GetTickCount
RtlZeroMemory
UnhandledExceptionFilter
HeapFree
GetCPInfo
GetModuleFileNameA
GetTimeFormatA
LoadLibraryA
QueryPerformanceCounter
GetACP
VirtualAlloc
lstrlenA
EnterCriticalSection
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetCommandLineW
GetFileType
GetModuleFileNameW
SetUnhandledExceptionFilter
LCMapStringW
InterlockedIncrement
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentThread
WriteConsoleOutputW
IsValidCodePage
GetDateFormatA
GetLastError
ReadConsoleA
TlsAlloc
SetConsoleCtrlHandler
GetTimeZoneInformation
GetUserDefaultLCID
GetLocaleInfoW
Sleep
FreeResource
InitializeCriticalSectionAndSpinCount
TlsGetValue
GetOEMCP
GetModuleHandleW
InterlockedExchange
GetStringTypeA
GetStartupInfoW
FreeLibrary
SetEnvironmentVariableA
CompareStringW
CompareStringA
LeaveCriticalSection
HeapSize
HeapAlloc
SetLastError
GetConsoleOutputCP
shell32
SHQueryRecycleBinA
SHChangeNotify
SHGetPathFromIDListW
ShellExecuteW
DragAcceptFiles
SHInvokePrinterCommandW
RealShellExecuteW
RealShellExecuteExA
DragQueryFileAorW
SHEmptyRecycleBinA
SHGetPathFromIDList
SheSetCurDrive
SHGetDataFromIDListW
ExtractAssociatedIconA
InternalExtractIconListW
DuplicateIcon
SHGetNewLinkInfo
RealShellExecuteExW
SHGetDiskFreeSpaceA
FindExecutableW
SHGetSpecialFolderPathW
SHBrowseForFolderW
SHInvokePrinterCommandA
SHUpdateRecycleBinIcon
SHFileOperationW
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 312KB - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ