Static task
static1
Behavioral task
behavioral1
Sample
4c1e5376c4eaafa4ac13b749f0eda1c5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c1e5376c4eaafa4ac13b749f0eda1c5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c1e5376c4eaafa4ac13b749f0eda1c5_JaffaCakes118
-
Size
150KB
-
MD5
4c1e5376c4eaafa4ac13b749f0eda1c5
-
SHA1
978c474fe6eeb2d5bd27d813ff6ae1da82941975
-
SHA256
e4fdab21f6361744665eca06f72c2b4656aef471898e082eb80e5e668a04f1aa
-
SHA512
b9576f04c8e240f0445bac8a6179cf174b021f1d3769d5a2b04dd33e6c8d1115c2f63eab0e20377d55eada7b7d0e3d22dec8a2de21b1ac32f04c4ddc138a70a9
-
SSDEEP
3072:BZk85iRCF6mLZj56X0vCz3wdms7pC7HRS0Z5dPsk4zVSF:Bh5HF9j56EKTIms1C7R5HOB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c1e5376c4eaafa4ac13b749f0eda1c5_JaffaCakes118
Files
-
4c1e5376c4eaafa4ac13b749f0eda1c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
829895cd14530b0de11e2c009e132e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shlwapi
PathRemoveFileSpecW
SHGetValueW
PathCombineW
PathAppendW
PathFileExistsW
kernel32
FillConsoleOutputAttribute
MoveFileW
GetProcessPriorityBoost
GetFullPathNameW
EnumResourceNamesW
FreeEnvironmentStringsW
CompareFileTime
GetShortPathNameW
SearchPathW
SetFileTime
comctl32
PropertySheetW
ole32
CoCreateInstance
CoTaskMemFree
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize
CoTaskMemAlloc
CoInitialize
shell32
SHFileOperationW
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
user32
IsWindow
IsDlgButtonChecked
DestroyWindow
GetFocus
CreateCursor
LoadIconW
PostMessageW
IsWindowEnabled
SetWindowLongW
ReleaseDC
SetWindowTextW
GetDC
PostQuitMessage
GetDlgCtrlID
MsgWaitForMultipleObjects
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ