c:\
Static task
static1
Behavioral task
behavioral1
Sample
4e0f9da3ff1a4475bd76157ac4010723_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4e0f9da3ff1a4475bd76157ac4010723_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4e0f9da3ff1a4475bd76157ac4010723_JaffaCakes118
-
Size
608KB
-
MD5
4e0f9da3ff1a4475bd76157ac4010723
-
SHA1
3826ad221a4cf73c5b84cc0474f086b044a0eb81
-
SHA256
8904aad1415fc4d8043cf14c37565bfd82ead1147df69ae2e11a49adfcea1f1d
-
SHA512
a6a7bd0110f9b680bc4e87647f90f813058f934760fb72e541f085c9e115a145290bc90a4b4e6b0f220309aba4d6ff20d1d5763dc3f238466b454308e3587a27
-
SSDEEP
12288:95h0iI/XTpD5U4auh/rUvZtjPvO99FKTOnKrQ:95h0B/jp6GaOLFKKYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e0f9da3ff1a4475bd76157ac4010723_JaffaCakes118
Files
-
4e0f9da3ff1a4475bd76157ac4010723_JaffaCakes118.exe windows:4 windows x86 arch:x86
a4401c611fdd6d1dd6b52efa19292aef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
DrawStatusText
CreateUpDownControl
ImageList_SetDragCursorImage
ImageList_Copy
ImageList_DragEnter
ImageList_GetImageCount
ImageList_LoadImageW
ImageList_GetImageRect
InitCommonControlsEx
ImageList_DragLeave
DrawStatusTextW
ImageList_SetImageCount
ImageList_Duplicate
ImageList_Draw
ImageList_DragMove
CreateMappedBitmap
user32
CreateCursor
RegisterClassExA
InSendMessageEx
DlgDirSelectComboBoxExA
GetClassLongA
RegisterClipboardFormatW
FreeDDElParam
DrawFocusRect
RegisterClassA
FlashWindowEx
SetWindowContextHelpId
SetScrollPos
WINNLSGetIMEHotkey
MessageBoxA
ExitWindowsEx
CreateWindowExA
GetPriorityClipboardFormat
SetUserObjectInformationW
EnumPropsA
EnumPropsExA
DdeAbandonTransaction
GetWindowDC
GetUserObjectInformationA
CharPrevExA
SetPropW
UnregisterDeviceNotification
DefWindowProcW
ShowWindow
DestroyWindow
OpenDesktopW
BroadcastSystemMessage
kernel32
GetLocaleInfoA
SetHandleCount
FreeLibrary
TlsSetValue
HeapDestroy
GetCurrentThread
GetConsoleOutputCP
MultiByteToWideChar
LCMapStringW
GetCommandLineA
InterlockedIncrement
GetUserDefaultLCID
RtlUnwind
CloseHandle
SetConsoleCtrlHandler
GetLocaleInfoW
LoadLibraryA
GetLastError
IsValidCodePage
CompareStringA
VirtualFree
GetOEMCP
WideCharToMultiByte
TerminateProcess
ExitProcess
GetCurrentProcess
GetTimeFormatA
Sleep
SetUnhandledExceptionFilter
WriteConsoleA
CompareStringW
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
SetStdHandle
SetFilePointer
HeapAlloc
VirtualAlloc
IsDebuggerPresent
VirtualQuery
GetModuleFileNameA
GetModuleHandleA
LeaveCriticalSection
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetStdHandle
InterlockedExchange
CreateMutexA
WriteFile
GetStringTypeA
GetDateFormatA
GetCurrentProcessId
SetThreadAffinityMask
GetCPInfo
FlushFileBuffers
GetTimeZoneInformation
OpenMutexA
HeapFree
QueryPerformanceCounter
LCMapStringA
FreeEnvironmentStringsA
HeapSize
GetConsoleMode
GetEnvironmentStringsW
GetModuleHandleW
GetFileType
GetSystemTimeAsFileTime
IsValidLocale
GetStartupInfoA
WriteConsoleW
GetEnvironmentStrings
TlsGetValue
ReadFile
CreateFileA
GetStringTypeW
HeapReAlloc
SetLastError
EnumSystemLocalesA
TlsFree
DeleteCriticalSection
GetCurrentThreadId
GetProcAddress
HeapCreate
GetConsoleCP
TlsAlloc
InterlockedDecrement
EnterCriticalSection
GetACP
GetTickCount
Sections
.text Size: 176KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ