Static task
static1
Behavioral task
behavioral1
Sample
b4f6a02e303ed5a6f236cfd52d1a78aa_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b4f6a02e303ed5a6f236cfd52d1a78aa_JaffaCakes118
-
Size
3.3MB
-
MD5
b4f6a02e303ed5a6f236cfd52d1a78aa
-
SHA1
74430829111647f428f9093e1edc42eedb25e08e
-
SHA256
6c97728bcb51bb54514e1ba6f9b2d44630da59724af28ceaeff522dd0d6fed2a
-
SHA512
bebd4f1237303a6ff77eaeabeb52a245705eb055ea840eb0258457a448c40d8a605fc74f5952d9999a6c0fdce23cc36c59a4d11f4b6b757279a10b1aa0143f40
-
SSDEEP
98304:rn1WIIXTjNH+cHbxXHMoyfn+9JYHDXRg1Xwm:j4/P0+f4DXKXwm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4f6a02e303ed5a6f236cfd52d1a78aa_JaffaCakes118
Files
-
b4f6a02e303ed5a6f236cfd52d1a78aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
867827e0ffe46ff5b2dfd844f407cb8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringA
CreateProcessA
CloseHandle
lstrcatA
GetDiskFreeSpaceA
lstrlenA
CreateDirectoryA
lstrcpyA
GetTempPathA
lstrcmpiA
_lread
_lwrite
_lcreat
_llseek
_lclose
_lopen
SetCurrentDirectoryA
GetStringTypeW
GetVersion
ExitProcess
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetProcAddress
GetOEMCP
LoadLibraryA
GetCPInfo
WriteFile
GetACP
GetFileType
GetStdHandle
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
FreeEnvironmentStringsW
GetStringTypeA
GetModuleFileNameA
WideCharToMultiByte
HeapDestroy
GetCurrentProcess
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
FreeEnvironmentStringsA
TerminateProcess
UnhandledExceptionFilter
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
user32
RegisterClassA
RegisterClassExA
BeginPaint
PostQuitMessage
wsprintfA
EndPaint
GetClientRect
DrawTextA
TranslateMessage
PostMessageA
GetMessageA
GetWindowRect
DispatchMessageA
GetDesktopWindow
UpdateWindow
CreateWindowExA
ShowWindow
LoadCursorA
LoadStringA
LoadIconA
MessageBoxA
DefWindowProcA
gdi32
SetBkMode
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE