Static task
static1
Behavioral task
behavioral1
Sample
4c25bf534b71beff9c8418d9b40ec13c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
4c25bf534b71beff9c8418d9b40ec13c_JaffaCakes118
-
Size
168KB
-
MD5
4c25bf534b71beff9c8418d9b40ec13c
-
SHA1
02cce735394c9c87893a41294d44ac1090e7665d
-
SHA256
cc196a854cd7fe02ba5062be51fd1cbfad2dd7130388e2bba8d723f677fe5c3c
-
SHA512
57aa4d3937664ed58882661f4f5e4ca45c17d600f11d79a40998a5fc51d7a79b025fd3570f000292a399065f2e86d011ba2afedabc482ffde3ef92cded41adeb
-
SSDEEP
3072:oNQYlEG0oiByawznszUY/CO/isnfnjgZwzo:ogZByJ7sxCO6sP/8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c25bf534b71beff9c8418d9b40ec13c_JaffaCakes118
Files
-
4c25bf534b71beff9c8418d9b40ec13c_JaffaCakes118.exe windows:4 windows x86 arch:x86
eb40bfb7eed65c8d67225466c032126d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFreeEx
GetTickCount
VirtualAlloc
VirtualFree
GetLastError
GetExitCodeProcess
GlobalAlloc
GetCommandLineA
LoadLibraryA
VirtualProtect
GetProcAddress
GetModuleHandleA
ExitProcess
GetFileAttributesA
VirtualLock
Sleep
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
GetCPInfo
GetOEMCP
GetStartupInfoA
GetVersionExA
HeapFree
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
HeapReAlloc
GetACP
GetSystemInfo
user32
IsZoomed
LoadIconA
IsChild
GetDesktopWindow
ShowWindow
IsIconic
GetCursorPos
SetCursorPos
GetWindowRect
LoadCursorA
GetParent
GetDC
msvfw32
DrawDibEnd
DrawDibSetPalette
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ