Static task
static1
Behavioral task
behavioral1
Sample
4c5818545b17d22c4c4fa948510fc67b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c5818545b17d22c4c4fa948510fc67b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c5818545b17d22c4c4fa948510fc67b_JaffaCakes118
-
Size
51KB
-
MD5
4c5818545b17d22c4c4fa948510fc67b
-
SHA1
3e984cccc56d5e1904370c57b3f28cdd2090e1be
-
SHA256
2ea707397de01468fa38d880918113b595199ffbe5530f5a9108b489a36bcc28
-
SHA512
e76921514f82fa1a0ff9470ad70dc7fb318a61cb41aaf480d2c3143d48e34ef35c5ea90f3a6157525680a09a5d0ad9142c38dc431064f96ff668bee2ad8fbced
-
SSDEEP
768:gwDyEN1WT/5SsWM94CgujxzPJqVv/hkm7wDyEN1WT/5SsWM94CgujxzPJqVv/hkS:gAzk4sW+xxzUjtAzk4sW+xxzUjx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c5818545b17d22c4c4fa948510fc67b_JaffaCakes118
Files
-
4c5818545b17d22c4c4fa948510fc67b_JaffaCakes118.exe windows:4 windows x86 arch:x86
4f505ddc64865658dbf47b4aeeaa9385
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileExW
DebugBreak
CallNamedPipeW
AllocConsole
DeviceIoControl
EnumDateFormatsW
gdi32
SetICMMode
ResetDCW
SetWindowOrgEx
RoundRect
Rectangle
StrokePath
user32
CharLowerBuffW
CreateMenu
DdeAddData
shell32
SHGetSetSettings
SHRestricted
SheChangeDirExA
SheGetDirExW
FreeIconList
StrStrA
Sections
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE