Static task
static1
Behavioral task
behavioral1
Sample
d4879c28d4179f4550cd5fb0badb5cd6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d4879c28d4179f4550cd5fb0badb5cd6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4879c28d4179f4550cd5fb0badb5cd6_JaffaCakes118
-
Size
310KB
-
MD5
d4879c28d4179f4550cd5fb0badb5cd6
-
SHA1
7f565ebe77845ddfed12d68dfd344b1fddd99592
-
SHA256
76c7b9fb04c3440e2101383e1f999ca329584ae1229ad816375359bb33895f3f
-
SHA512
3bd9622396caefbe5ef3087d64b89f61f27cd732704ea003f4633c9783e1b0be8167a62d2ab0fa61d4f43262f13e3afb2415909fb7442b782c5572b1be0d67e5
-
SSDEEP
6144:585KMTNzzfnZNMcWB4/AYOP4gvgpIyrHbrVZlfJ73dFWylPGFcr8:5GNnTW4/AXPMpzx5lPecY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4879c28d4179f4550cd5fb0badb5cd6_JaffaCakes118
Files
-
d4879c28d4179f4550cd5fb0badb5cd6_JaffaCakes118.exe windows:4 windows x86 arch:x86
46fc99e890109636911e64f4c49329e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
GetModuleHandleA
HeapCreate
GetLocaleInfoA
FlushFileBuffers
GetCurrentProcess
VirtualProtect
GetCommandLineA
SetEvent
GetACP
ReadConsoleA
IsDebuggerPresent
OpenMutexA
InterlockedExchange
GetCurrentThread
GetSystemDirectoryA
GetCompressedFileSizeA
GetStdHandle
GetCurrentProcessId
RaiseException
GlobalFree
user32
FillRect
GetWindowTextA
GetFocus
GetDlgItem
ReleaseDC
SetActiveWindow
IsIconic
GetWindow
SetForegroundWindow
BeginPaint
GetClassNameA
ValidateRgn
EndPaint
ShowWindow
FrameRect
DrawTextA
GetCursorPos
wsprintfA
GetParent
linkinfo
CreateLinkInfoA
IsValidLinkInfo
ResolveLinkInfoA
GetLinkInfoData
DestroyLinkInfo
rtutils
LogErrorA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ