Static task
static1
Behavioral task
behavioral1
Sample
4bfcb5f466d298a14f88b7f8b7c6da25_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4bfcb5f466d298a14f88b7f8b7c6da25_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4bfcb5f466d298a14f88b7f8b7c6da25_JaffaCakes118
-
Size
3.4MB
-
MD5
4bfcb5f466d298a14f88b7f8b7c6da25
-
SHA1
c7daecd6fbb16a4e78455857bda08af234e50447
-
SHA256
6503bfe88f3493a19bfcc8435460e48b179a5e237f9e5739e34dc5a89f035469
-
SHA512
36dd0af7b3603b8a2230780ba5e27a90bd794d49393b7bc0935d712a93666fbee0bd6824cba070d1b60aa562a4ae13aafa8823212356b1cf8d39011dc1828db6
-
SSDEEP
98304:Z6EkBJZhov73s7VAC8Zug5Pb1yMyUS69vNAKQX9iFc:Z6EkBJ4zMVDyPkMy/wva7XsO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bfcb5f466d298a14f88b7f8b7c6da25_JaffaCakes118
Files
-
4bfcb5f466d298a14f88b7f8b7c6da25_JaffaCakes118.exe windows:4 windows x86 arch:x86
fd05cb9880971480b2db70b84fd0223d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
GetModuleHandleW
QueryPerformanceCounter
GetProcAddress
Sleep
GetTickCount
FreeLibrary
WideCharToMultiByte
SetLastError
HeapAlloc
GetProcessHeap
CreateFileW
ExitProcess
GetStdHandle
ReadFile
SetEvent
GetModuleHandleA
CreateEventW
TlsAlloc
HeapSetInformation
WriteConsoleW
LoadLibraryW
LoadLibraryExW
CompareStringW
RtlUnwind
LCMapStringW
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
SetStdHandle
FindNextFileW
IsValidCodePage
FindFirstFileW
GetConsoleCP
SetEndOfFile
GetVersionExW
ReleaseMutex
GetFileSize
EncodePointer
VirtualFree
GetModuleHandleExW
GetLocaleInfoW
UnmapViewOfFile
ExpandEnvironmentStringsW
user32
DispatchMessageW
ShowWindow
PostQuitMessage
CreateWindowExW
SetWindowLongW
GetDlgItem
GetSystemMetrics
GetWindowRect
EndDialog
SetWindowTextW
SetTimer
LoadIconW
SetFocus
GetSysColor
PeekMessageW
BeginPaint
ScreenToClient
UpdateWindow
Sections
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE