Static task
static1
Behavioral task
behavioral1
Sample
4e0e54d18bc5fd52fc8c6bc8eb7f515e_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
4e0e54d18bc5fd52fc8c6bc8eb7f515e_JaffaCakes118
-
Size
278KB
-
MD5
4e0e54d18bc5fd52fc8c6bc8eb7f515e
-
SHA1
40d4a1d203ed52398a38ff0aa0acc2981b77cbbd
-
SHA256
a4fb6b343e52f9a50b7e440a6d2993d8f54005286e0a312c263f31dc7d14306a
-
SHA512
2fe6df58cb28fb83c798751a58b66f1d300fb2932d76bc85da826f56c0a82f6ffe205ba335be56e590a1243e13fbfe859552252755baa5aa3bab34069ec41611
-
SSDEEP
6144:upwR0zzOv/+iqBMZRRWPL4Qm4MTX2ef6cv3:GwR0ziHI+cLzXA2eyU3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e0e54d18bc5fd52fc8c6bc8eb7f515e_JaffaCakes118
Files
-
4e0e54d18bc5fd52fc8c6bc8eb7f515e_JaffaCakes118.exe windows:4 windows x86 arch:x86
51e60184c7ef3ba2bf5d24f70693da89
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceExA
GlobalAddAtomW
InterlockedExchange
LocalFree
GetModuleHandleA
EnumResourceTypesA
GetLastError
GetProcessHeap
GetCommandLineA
FindNextFileW
RaiseException
SizeofResource
HeapFree
HeapAlloc
GetCurrentDirectoryA
FindFirstFileA
EnumResourceNamesA
FindFirstFileW
LoadLibraryW
GetProcAddress
CloseHandle
LoadResource
EnumResourceNamesA
SetLastError
LockResource
GetCurrencyFormatA
FormatMessageA
GlobalFree
MultiByteToWideChar
EnumResourceLanguagesA
Sleep
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyA
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
user32
wsprintfW
PostThreadMessageW
CharNextA
GetMessageW
CharUpperW
EnumWindows
MessageBoxA
IsWindowVisible
GetWindowThreadProcessId
LoadStringA
DispatchMessageA
GetWindowTextA
KillTimer
SetTimer
PeekMessageW
wsprintfA
Sections
.text Size: 150KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ