Static task
static1
Behavioral task
behavioral1
Sample
4e44ca94f7682b7a8734025a05545a42_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
4e44ca94f7682b7a8734025a05545a42_JaffaCakes118
-
Size
93KB
-
MD5
4e44ca94f7682b7a8734025a05545a42
-
SHA1
9c299205cf67e29c29863a79b8d52365597ca0e3
-
SHA256
c2e0ff8dd4814a6bdba074eadd56f2a41c23317071efb6f416478f17f073ed6b
-
SHA512
c408942f9f7128545446e473d6172850c47b39349fce649338157a001e4b9475b8b48ca5f3bc8e702b95e8d3374f0372a8581c0e7f2776ae9ee65e61afaedf3f
-
SSDEEP
1536:7XXdfLTurMp49XaOXaaDEdEC+d0eXM30etEbMj9YsSrDrQ8Kmq0NTTDhvJGzccW0:7Xdnug0apaOXkAketIMjmJA+ThvJycZy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e44ca94f7682b7a8734025a05545a42_JaffaCakes118
Files
-
4e44ca94f7682b7a8734025a05545a42_JaffaCakes118.exe windows:5 windows x86 arch:x86
da6d4e79c23ce6b2a67dfc6243f45738
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
IsDlgButtonChecked
GetWindowLongA
SetWindowTextA
CheckDlgButton
EnableScrollBar
DispatchMessageA
LoadCursorA
RegisterClassExA
BeginPaint
GetClipboardViewer
EndPaint
gdi32
GetStockObject
CreatePen
SetBkMode
CreateEllipticRgn
CreatePatternBrush
DeleteObject
SetMapMode
shlwapi
ord29
ole32
OleSetContainedObject
CoUnmarshalHresult
CoIsOle1Class
CoGetMalloc
StgIsStorageFile
kernel32
DeleteCriticalSection
QueryPerformanceFrequency
GetACP
GetCommandLineA
LeaveCriticalSection
HeapDestroy
HeapFree
GetStartupInfoA
GetFileAttributesExA
InterlockedExchange
GetEnvironmentStrings
GetLastError
EnterCriticalSection
InitializeCriticalSection
HeapAlloc
HeapCreate
GetModuleHandleA
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE