Static task
static1
Behavioral task
behavioral1
Sample
4b1e468bb79b8aba793a2892f0d7e736_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b1e468bb79b8aba793a2892f0d7e736_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b1e468bb79b8aba793a2892f0d7e736_JaffaCakes118
-
Size
22KB
-
MD5
4b1e468bb79b8aba793a2892f0d7e736
-
SHA1
ccbceab303c08c4fdf58dd757150146720af05d6
-
SHA256
97d1703bda70278d83621c471b981f99caa856d5b5145aa4bc1956bf850d0a4a
-
SHA512
b838646ad099ff24ff0dcceef9730e0dcafa867e3050e7a02cd85479b6e721d8c80d6dc3b39f33fedbb9e3eb93753011edf5e7306ccc776ef39b39d0324662e5
-
SSDEEP
384:bz3wZY/Z4Gx3aTI9SeFjtSmD55P+kheqzHa5JQlb9ZrlBZ:IKHZhvP+ExzHxJJZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b1e468bb79b8aba793a2892f0d7e736_JaffaCakes118
Files
-
4b1e468bb79b8aba793a2892f0d7e736_JaffaCakes118.exe windows:5 windows x86 arch:x86
376c3fec720fe3e6f854199e47d55364
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
VirtualAlloc
SetUnhandledExceptionFilter
InterlockedExchange
GetLastError
RtlUnwind
GetSystemTime
TlsAlloc
GetOEMCP
TlsGetValue
CreateProcessA
CloseHandle
IsBadCodePtr
InterlockedIncrement
GetTickCount
GetLocalTime
IsBadWritePtr
TlsSetValue
GetTimeZoneInformation
FormatMessageA
TlsFree
ExitProcess
LocalFree
ReadFile
CreateFileA
IsDebuggerPresent
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
user32
MessageBoxA
wsprintfA
GetWindow
GetClientRect
GetWindowRect
ole32
StringFromGUID2
CoInitialize
CoTaskMemRealloc
CoCreateInstance
CoUninitialize
CLSIDFromString
oleaut32
LoadRegTypeLi
LoadTypeLi
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ