Static task
static1
Behavioral task
behavioral1
Sample
4c13ec6e8e87afb684a2e464a58cadfb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c13ec6e8e87afb684a2e464a58cadfb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c13ec6e8e87afb684a2e464a58cadfb_JaffaCakes118
-
Size
408KB
-
MD5
4c13ec6e8e87afb684a2e464a58cadfb
-
SHA1
00d7d66c66af423bb4d0c7a8a339fcc000594143
-
SHA256
a0c421e379ac2ef46b98e00fae3f36f24af4b42ca464a6168934a96d4fa6581c
-
SHA512
4b38c71d3f9d0d5715c72a333c776f6315d3d685fddf6d616972d70dc7f4fc221b3adc6cde79a2cc708e6d30bdbd5ac66899c925e7799a700815492ea975465b
-
SSDEEP
12288:FDYFv/CQwgBqc9eNcetG7v7ddFUOJrlXKbZ4Bo:K+OeN/MXeOVxKbU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c13ec6e8e87afb684a2e464a58cadfb_JaffaCakes118
Files
-
4c13ec6e8e87afb684a2e464a58cadfb_JaffaCakes118.exe windows:4 windows x86 arch:x86
d34a61bf3fb83564092eb1fc02181234
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PageSetupDlgA
PrintDlgW
FindTextW
GetFileTitleA
GetSaveFileNameA
gdi32
RectInRegion
GetMiterLimit
DescribePixelFormat
advapi32
RegOpenKeyExA
CryptHashData
RegRestoreKeyW
CryptReleaseContext
AbortSystemShutdownW
DuplicateToken
shell32
ExtractAssociatedIconExA
ShellHookProc
ShellExecuteEx
ExtractIconEx
SHFreeNameMappings
ExtractIconExA
SheChangeDirA
ExtractAssociatedIconExW
SHInvokePrinterCommandA
kernel32
GetLastError
WriteFile
TerminateProcess
SetHandleCount
GetVersion
GetStringTypeA
GetFileType
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCurrentThreadId
IsBadWritePtr
GetCommandLineA
MultiByteToWideChar
GetProcAddress
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
TlsGetValue
HeapAlloc
VirtualQuery
TlsSetValue
GetACP
SetConsoleTitleA
CreateWaitableTimerA
UnhandledExceptionFilter
GetStdHandle
GetModuleHandleA
FreeEnvironmentStringsW
GetModuleFileNameA
HeapCreate
TlsAlloc
GetEnvironmentStrings
SetLastError
CreateSemaphoreA
GetCurrentProcess
RtlUnwind
GetOEMCP
LeaveCriticalSection
HeapDestroy
LCMapStringW
DeleteCriticalSection
WideCharToMultiByte
TlsFree
GetCurrentProcessId
GetStartupInfoA
LCMapStringA
LoadLibraryA
GetTickCount
HeapReAlloc
ExitProcess
VirtualAlloc
VirtualFree
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetStringTypeW
HeapFree
GetCurrentThread
wininet
InternetFortezzaCommand
HttpSendRequestA
GetUrlCacheEntryInfoExW
InternetQueryOptionA
SetUrlCacheConfigInfoW
CreateUrlCacheEntryA
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 267KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ