Static task
static1
Behavioral task
behavioral1
Sample
4c3b88f94f0662326d67c99910489ee8_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
4c3b88f94f0662326d67c99910489ee8_JaffaCakes118
-
Size
220KB
-
MD5
4c3b88f94f0662326d67c99910489ee8
-
SHA1
75aabf0e86684741c15c0c4139445f165d261f6e
-
SHA256
cf1d935d5552e048808a4798e8d012606a479f061e6ee2f523cef3ee0689c56d
-
SHA512
9c02aadef55166ba757c6b11469d62bf65495dc2b6c4e6899cc341e18c30269be8c2cff8ccfaa293edccdc9d4ec1b69ed604d107088d0b07e0b56d06d3a28aea
-
SSDEEP
6144:RBVMNBt9yUHpzDrePU0Uvlellb1Xqfj5Ib4v:RBiB6UJzvXlcRM5Ib0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c3b88f94f0662326d67c99910489ee8_JaffaCakes118
Files
-
4c3b88f94f0662326d67c99910489ee8_JaffaCakes118.exe windows:4 windows x86 arch:x86
5518d7c543f68469ecb996a0ce80ec07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
VirtualAlloc
GetCurrentThreadId
GetProcessHeap
GetModuleFileNameA
ResetEvent
SetFileApisToANSI
VirtualProtect
LoadLibraryA
IsBadCodePtr
GetProcAddress
GetModuleHandleA
HeapUnlock
TerminateThread
GetLocaleInfoA
VirtualFree
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapAlloc
GetCPInfo
GetOEMCP
TlsFree
GetStringTypeW
ReleaseMutex
GetACP
HeapFree
HeapCreate
GetSystemInfo
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetStartupInfoA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
user32
InSendMessage
IsZoomed
GetLastActivePopup
LoadCursorA
EndPaint
GetDC
GetCursorPos
SetTimer
ReleaseDC
CreateIcon
IsWindowVisible
IsIconic
SetCursorPos
GetWindowRect
SetCursor
LoadBitmapA
GetTopWindow
GetDesktopWindow
gdi32
FloodFill
PatBlt
shell32
ShellAboutA
psapi
GetModuleBaseNameA
EnumProcesses
GetProcessMemoryInfo
msvfw32
DrawDibSetPalette
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ