Static task
static1
Behavioral task
behavioral1
Sample
b40605c70626890b05207a3fe7bde52d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b40605c70626890b05207a3fe7bde52d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b40605c70626890b05207a3fe7bde52d_JaffaCakes118
-
Size
181KB
-
MD5
b40605c70626890b05207a3fe7bde52d
-
SHA1
a9852b44a1019668a7dcfee0a091eafcf39935b9
-
SHA256
50e2f449dcdb49652b0c61481f51d6a7da13e331b99ec85cded0d413debe033b
-
SHA512
f1d40d45b7b75a47c42616cd5ec7edde0704a881205e7232660615eed2cbb5632542ca48cb5f65c3674ecbc61b1331af20776caf5f8ea55201a030517921e627
-
SSDEEP
3072:KmwZIgPcT+KG1+aburX9YG0VCo8VICUpx/ARx47AQ7QGfNF9GJ75/++9n:zmIYcaKGkak0R8CpxYj4kW9GJ75/x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b40605c70626890b05207a3fe7bde52d_JaffaCakes118
Files
-
b40605c70626890b05207a3fe7bde52d_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd0352792056ee1f76ff9e63e613a9a2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
GetVersionExA
GetTickCount
Sleep
GetPrivateProfileIntW
GetAtomNameA
GetCurrentDirectoryW
WritePrivateProfileStringW
FindFirstChangeNotificationW
GetModuleFileNameW
FindNextChangeNotification
GlobalUnlock
MulDiv
WaitForSingleObject
FindCloseChangeNotification
GetVersionExW
LoadLibraryW
LoadLibraryA
LoadResource
GetModuleHandleW
EnumResourceTypesA
GlobalSize
InitializeCriticalSection
GetPrivateProfileStringW
GlobalLock
FindResourceW
MultiByteToWideChar
FreeLibrary
CloseHandle
IsValidCodePage
FindClose
lstrlenW
LockResource
GlobalAlloc
GetProcAddress
FindFirstFileW
GetLocaleInfoW
shell32
SHGetImageList
SHGetFolderPathW
SHFileOperationW
ShellExecuteExA
ShellExecuteExW
SHGetPathFromIDListA
ShellExecuteW
SHGetFileInfoA
CommandLineToArgvW
SHBrowseForFolderA
Shell_NotifyIconA
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ