Static task
static1
Behavioral task
behavioral1
Sample
4b293b92490c6429bd6258c3958230c4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b293b92490c6429bd6258c3958230c4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b293b92490c6429bd6258c3958230c4_JaffaCakes118
-
Size
281KB
-
MD5
4b293b92490c6429bd6258c3958230c4
-
SHA1
23017875e097a9ad047fedc26e300e0265845659
-
SHA256
81443acb6f619d6e7d85c0ae4a7b41f35aad4a87c817c9bde397e329fa19d138
-
SHA512
02b47c9f2711a87a5a96224464947659608c2fb47b557cd55a392fb0808df11cb2b0a2e4e015dc2d895ded21e68aa4fc163a69fcee88bd1c8d364a882fe89820
-
SSDEEP
6144:Z1w39kuuhQ/4lj9nywgCUlR0QnL+DHzJusOBiFTdxyAK7KB:HwN+7ywhUlRJexOmJoAK+B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b293b92490c6429bd6258c3958230c4_JaffaCakes118
Files
-
4b293b92490c6429bd6258c3958230c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
d2b2ebca9100e132986c5e1a03649c7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
lstrlenA
TlsGetValue
GetStdHandle
GetAtomNameA
GetConsoleCP
VirtualProtect
FindAtomA
GetProfileIntA
GlobalUnlock
GetACP
HeapWalk
GetModuleHandleA
CloseHandle
HeapReAlloc
GetVersion
LoadLibraryA
GetTickCount
CompareFileTime
InterlockedExchange
TlsFree
user32
PaintDesktop
GetWindowTextA
GetKeyboardLayout
GetMenuStringA
GetDlgItem
SetPropA
SubtractRect
GetScrollRange
EqualRect
TranslateMessage
EnableScrollBar
ShowWindow
UpdateWindow
DialogBoxParamA
PostMessageA
CreateCaret
MessageBoxA
ModifyMenuA
CopyRect
SetWindowPos
LoadIconA
InsertMenuA
DestroyMenu
DispatchMessageA
InflateRect
GetMenu
msi
MsiEnumClientsA
MsiGetMode
MsiEnumProductsA
MsiCloseHandle
MsiDoActionA
ws2_32
WSAAccept
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ