Static task
static1
Behavioral task
behavioral1
Sample
4b7904caa2c1083d3bf64b975218640f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b7904caa2c1083d3bf64b975218640f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b7904caa2c1083d3bf64b975218640f_JaffaCakes118
-
Size
73KB
-
MD5
4b7904caa2c1083d3bf64b975218640f
-
SHA1
62f981502221593601acb11f248d73fac3cecffa
-
SHA256
1051758e1c2cc955c4ddaf592393f2f717d5055b6f1925af9220c09bc8c7daba
-
SHA512
8ba3537c2ab58412f8169687c9227a0c812752c9a42aa3f1158de9b57b989feaa6bf9b60aeec4ef2424589c2013154d43393f93a8712284afe2ab4f9f649dc04
-
SSDEEP
1536:BBavxEBcA2jcgR9FPw5UvRN759AwNYMlBp1L5NXEZjgbI:YxEBcA2IgReUIibrqjgc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b7904caa2c1083d3bf64b975218640f_JaffaCakes118
Files
-
4b7904caa2c1083d3bf64b975218640f_JaffaCakes118.exe windows:4 windows x86 arch:x86
43e1c01ea3824398b7ddec938c7a1229
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_initterm
_amsg_exit
_initterm
_XcptFilter
malloc
free
iswalpha
iswdigit
_vsnwprintf
wcschr
_wcsicmp
_j0
??0exception@@QAE@XZ
__RTDynamicCast
??1type_info@@UAE@XZ
memmove
_purecall
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_wcsnicmp
rand
iswspace
_wcsupr
_beginthreadex
_errno
_unlock
__dllonexit
_lock
_onexit
swscanf
memset
_vsnprintf
_CxxThrowException
towlower
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
toupper
iswctype
wcsrchr
memcpy
kernel32
GetProcessHeaps
InterlockedDecrement
InterlockedIncrement
HeapValidate
InterlockedCompareExchange
InterlockedExchange
GetSystemTimeAsFileTime
TerminateProcess
DeleteFileW
RemoveDirectoryW
SetEnvironmentVariableW
DisableThreadLibraryCalls
DebugBreak
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
OpenEventW
CreateSemaphoreW
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
CreateDirectoryW
CreateTimerQueueTimer
ChangeTimerQueueTimer
DuplicateHandle
GetFileAttributesW
ExpandEnvironmentStringsW
GetCurrentThread
CreateProcessW
HeapAlloc
GetProcessHeap
HeapFree
GetVersionExW
SizeofResource
LockResource
LoadResource
FindResourceW
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
TlsAlloc
TlsGetValue
TlsFree
TlsSetValue
HeapCreate
HeapSize
HeapValidate
HeapReAlloc
HeapDestroy
SwitchToThread
DeleteTimerQueueTimer
TryEnterCriticalSection
InitializeCriticalSection
LocalFileTimeToFileTime
SystemTimeToFileTime
CompareFileTime
gdiplus
GdipGetImageThumbnail
GdipCloneImage
GdipDrawImageRectI
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ