Static task
static1
Behavioral task
behavioral1
Sample
95cd8a4e9a5ee01a279ca8bd7543c441_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
95cd8a4e9a5ee01a279ca8bd7543c441_JaffaCakes118
-
Size
1.0MB
-
MD5
95cd8a4e9a5ee01a279ca8bd7543c441
-
SHA1
8eb50da7d6272940f1f024176c718a63758571bf
-
SHA256
479fbfe6c4f9aec101b4d43bf7584342ec5a26ea79154d08b0eb9fc3ec67663c
-
SHA512
182045368f6b8c2f9b6f0faca6999c42c0440cadcbe5abe3cfd20a3a22ac1b43a52a5878a2d651f31969fa0e5566810b8763844fcff585efb0b84e79e4e10131
-
SSDEEP
24576:sDTbM9Lz6497L3li89RwporXjQSk64Dc:ETQ9f6I7LlBLQSkHD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95cd8a4e9a5ee01a279ca8bd7543c441_JaffaCakes118
Files
-
95cd8a4e9a5ee01a279ca8bd7543c441_JaffaCakes118.exe windows:4 windows x86 arch:x86
b5c4dfd983fda233311af0a872092707
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidCreate
kernel32
CopyFileW
LCMapStringW
IsBadReadPtr
IsBadWritePtr
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
CreateFileA
InterlockedExchange
GetProcessId
HeapSize
HeapReAlloc
HeapFree
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindClose
InitializeCriticalSection
FindNextFileW
InterlockedDecrement
advapi32
CloseEventLog
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
gdi32
DeleteObject
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
PatBlt
CreatePatternBrush
CreateBitmap
GetFontData
DeleteDC
StretchBlt
SetBrushOrgEx
SetStretchBltMode
ExtTextOutW
SetBkColor
GetDeviceCaps
MoveToEx
LineTo
TextOutW
SetTextColor
ExtCreatePen
GetTextExtentPointW
SetBkMode
SelectObject
GetTextExtentPoint32W
GetTextMetricsW
BitBlt
shell32
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHFileOperationW
Sections
.text Size: 645KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 340KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ