Static task
static1
Behavioral task
behavioral1
Sample
f4e6664318a0088c7ffea0b12184351a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4e6664318a0088c7ffea0b12184351a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4e6664318a0088c7ffea0b12184351a_JaffaCakes118
-
Size
238KB
-
MD5
f4e6664318a0088c7ffea0b12184351a
-
SHA1
f56d06c0cd1cd21fab007dffd27e2a34a58d6e33
-
SHA256
4848aa9a6aa3298e360297815e559493423328c9a7e229f83cbd63428df47878
-
SHA512
0baceb404acd06ab530f69919716ed4cc7eb822e85a069b806bc37fbb5490c7afe52b091aebd25bc2e2a8560ce22afe99a604bd6dca3208abd04a36be71400df
-
SSDEEP
6144:TJXp4nRxJWlDYvhruJ7lluYBMNCGWHj/tNoT4iuB:TJ54nhWlDqG/uY6o7TB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4e6664318a0088c7ffea0b12184351a_JaffaCakes118
Files
-
f4e6664318a0088c7ffea0b12184351a_JaffaCakes118.exe windows:4 windows x86 arch:x86
84fd4a9495721db43424f6b1c60fa981
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
HeapDestroy
HeapCreate
GenerateConsoleCtrlEvent
VirtualFree
GetModuleFileNameW
TerminateProcess
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
HeapReAlloc
GetTimeZoneInformation
DebugBreak
OutputDebugStringW
WriteConsoleA
OutputDebugStringA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
CreateFileW
user32
SendDlgItemMessageA
IsDialogMessageA
SetWindowTextA
GetWindowRect
GetWindowPlacement
SystemParametersInfoW
CallWindowProcA
DefWindowProcA
PtInRect
DeferWindowPos
oleaut32
DispGetIDsOfNames
DispGetIDsOfNames
SafeArrayRedim
CreateErrorInfo
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString
comdlg32
GetFileTitleA
oledlg
OleUIBusyA
Sections
.text Size: 147KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE