Static task
static1
Behavioral task
behavioral1
Sample
f4b584390544b4e2056577c4b527dabe_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4b584390544b4e2056577c4b527dabe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4b584390544b4e2056577c4b527dabe_JaffaCakes118
-
Size
274KB
-
MD5
f4b584390544b4e2056577c4b527dabe
-
SHA1
ed639eabb63ed59a2ae4d7d537195af374de1eaa
-
SHA256
d0544bf7d26e9efe2844df033c1dba6c5f531f027c9772642e41643aedc6376a
-
SHA512
af4c8f84363bca0c8a70b1d19fa95f39c45307ced89b446727e7fb2d411e635f32f0666759d38f71918acdca19c0d72165717202478bc7ae506743222b2efca7
-
SSDEEP
6144:UL1B0OtJV0ys8+xt7KGtV68mFophbR8ga/2mp:UJmO+lDJV68miph12
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4b584390544b4e2056577c4b527dabe_JaffaCakes118
Files
-
f4b584390544b4e2056577c4b527dabe_JaffaCakes118.exe windows:5 windows x86 arch:x86
a1ceac80ae06684ab143ddc23de8e9f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptEnumOIDInfo
CertFindCRLInStore
CryptHashMessage
CryptMemFree
CertGetNameStringA
CryptEncryptMessage
CertCreateCRLContext
CryptMemRealloc
CertDeleteCTLFromStore
CryptMsgDuplicate
CryptDecodeMessage
certcli
CAEnumNextCA
CADeleteCA
uxtheme
GetWindowTheme
GetThemeSysBool
GetCurrentThemeName
GetThemeBackgroundExtent
GetThemeAppProperties
GetThemeFilename
DrawThemeText
GetThemePosition
GetThemeSysSize
GetThemeSysInt
IsThemeActive
GetThemeEnumValue
mprapi
MprAdminBufferFree
MprInfoBlockFind
kernel32
GetConsoleAliasW
ResetEvent
GetBinaryTypeW
CreateNamedPipeA
GetLongPathNameA
CreateSemaphoreA
RemoveDirectoryA
WaitForSingleObjectEx
GetEnvironmentVariableW
HeapFree
LoadLibraryExA
IsBadReadPtr
GetCurrentDirectoryA
lstrlenW
FindFirstFileW
GetProfileIntA
GetProcAddress
LoadLibraryA
Sections
.text Size: 251KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data1 Size: - Virtual size: 256B
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ