Static task
static1
Behavioral task
behavioral1
Sample
74efb872e2b13bbf90f7572b5e429b4b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
74efb872e2b13bbf90f7572b5e429b4b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
74efb872e2b13bbf90f7572b5e429b4b_JaffaCakes118
-
Size
173KB
-
MD5
74efb872e2b13bbf90f7572b5e429b4b
-
SHA1
98c16af707d0fb40929cd5f69f7639ede351dc0e
-
SHA256
09db531df22b7e482332b15abfc6031f1d1fb92d5e0f9fdae3c29b3a96604ea8
-
SHA512
916f75b23c90c31a33be828913f22c56f9ae166e0ccb2580a68cb40a60f33ae77904b3e72681c0f4364274407f0d15d0dc76b78733eaea754b273bd6507a9ca9
-
SSDEEP
3072:bTS/IgKODjEqUMl5ugbJV/VK2SjVNOCw8OdHIYXjYO65qs2CuwKq:bO/IgKODjEqUGogbn/E2SjfI8O7jxW2u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74efb872e2b13bbf90f7572b5e429b4b_JaffaCakes118
Files
-
74efb872e2b13bbf90f7572b5e429b4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d9bc58d9b07289ecd59a88e4d3c8801e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
kernel32
MoveFileW
WriteFile
OutputDebugStringW
LoadLibraryExW
PrivMoveFileIdentityW
GetFileAttributesW
lstrcpynW
LoadLibraryW
GetProcessId
GetModuleFileNameW
CreateDirectoryW
DuplicateHandle
CreateMutexA
CreateEventA
GetProcAddress
MapViewOfFile
CloseHandle
AddAtomW
EnumResourceTypesA
CreateFileW
WaitForSingleObject
ProcessIdToSessionId
CreateFileMappingA
VirtualFree
UnmapViewOfFile
GetSystemTime
ExitProcess
OpenProcess
GetUserDefaultUILanguage
GetStdHandle
DeleteAtom
LoadLibraryA
SystemTimeToFileTime
VirtualAlloc
SetEvent
GetFileAttributesA
ReleaseMutex
FindAtomW
user32
CreateWindowExW
LoadCursorW
MessageBoxW
GetDC
GetUpdateRgn
GetWindowInfo
RegisterClassExW
EndDialog
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ