Static task
static1
Behavioral task
behavioral1
Sample
4c9525c9cc549d5ddd037c4553aeaae1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c9525c9cc549d5ddd037c4553aeaae1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c9525c9cc549d5ddd037c4553aeaae1_JaffaCakes118
-
Size
41KB
-
MD5
4c9525c9cc549d5ddd037c4553aeaae1
-
SHA1
41a122355f9f7cb4fb8d1098884513afc9d5e445
-
SHA256
22ee1d2f9d46843bf094e8d5d67b6c1f28333be9f158b83179c0d696a5239e24
-
SHA512
fd51e8b8178f35b3fe4a0a9badaeafb50e217d839e74686366b0582404aeac17ddf28fb5a0fb2b10ee2acee9c67c6491924d8eeb7489b738b327b6af9c6a6e24
-
SSDEEP
768:ByyyyyyyyyyyyyyyyXAC/v5jcZ7HJIyx4m5RCnZwWUVjW8AnS6KtXLUmkKmM:eyFcZ7HmyOm5RCZFca8ASNBrD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c9525c9cc549d5ddd037c4553aeaae1_JaffaCakes118
Files
-
4c9525c9cc549d5ddd037c4553aeaae1_JaffaCakes118.exe windows:4011 windows x86 arch:x86
9cff61275ebc9226ac3cb93056b7c967
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
TerminateProcess
HeapFree
GetACP
GetTickCount
CreateFileW
GetCurrentProcess
GetACP
WideCharToMultiByte
VirtualAlloc
HeapFree
CreateFileW
GetACP
lstrcpyW
DeleteCriticalSection
GetStartupInfoW
MultiByteToWideChar
ExitProcess
GetModuleHandleA
GetLastError
InterlockedDecrement
LocalFree
GetCurrentProcessId
InterlockedDecrement
FreeLibrary
GetCommandLineW
GetVersionExA
MultiByteToWideChar
GetModuleFileNameA
WriteFile
VirtualFree
HeapReAlloc
SetEvent
GetCommandLineA
GetCommandLineA
ExitProcess
user32
GetParent
GetWindowRect
GetWindowLongW
OffsetRect
InvalidateRect
CharNextW
SetTimer
WinHelpW
SetCursor
GetDC
MessageBoxA
EndPaint
MessageBeep
DestroyIcon
IsWindow
GetParent
LoadStringW
CreateWindowExW
GetKeyState
EnableMenuItem
GetDC
GetWindow
GetDlgItem
MoveWindow
CreateDialogParamW
MessageBeep
IsIconic
IsIconic
LoadStringA
DestroyIcon
ReleaseCapture
SetCapture
IsDialogMessageW
SetDlgItemTextW
CallWindowProcW
LoadStringW
SendMessageW
SetCapture
DispatchMessageW
ReleaseCapture
GetSystemMetrics
IsIconic
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ