Static task
static1
Behavioral task
behavioral1
Sample
f4d93540f41e71b3957fa68918c9b3e2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4d93540f41e71b3957fa68918c9b3e2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4d93540f41e71b3957fa68918c9b3e2_JaffaCakes118
-
Size
138KB
-
MD5
f4d93540f41e71b3957fa68918c9b3e2
-
SHA1
3c60a5c8149e3bd69f59dc7f917e82c7168e525f
-
SHA256
491dab0154e14d58fa62a2aaac6ed32a54593423a8924ddeb1c4eac5f9a06097
-
SHA512
67057ed648786fe2aab210a374abf6ef1bfb546c6bcead7153533d963222e2950b8f7301d9c372eb3e11bcd25f7d601d674bc0ff664df821e62d3a90eb480b5d
-
SSDEEP
3072:nzMH5Xre8+8iHpPQ5w3gYKgwM7xf4gZTw/I8kjnIpxYb:nA5Xrddep4bYKgnxf4gS/Y2s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4d93540f41e71b3957fa68918c9b3e2_JaffaCakes118
Files
-
f4d93540f41e71b3957fa68918c9b3e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
15c6ee75f11d18f2c5eb2da6ea7f5dc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
FreeLibrary
LoadLibraryA
GetDriveTypeA
IsDebuggerPresent
GetModuleHandleA
GetCommandLineA
ExitThread
GetCurrentProcessId
GetProcessTimes
Sleep
GetModuleFileNameA
GetCurrentThreadId
GetThreadPriority
CloseHandle
GetStartupInfoA
IsValidCodePage
GetCurrentProcess
GetLogicalDrives
VirtualAlloc
TlsAlloc
user32
GetFocus
GetForegroundWindow
ReleaseDC
OpenIcon
CreateWindowExA
GetWindow
ShowWindow
UpdateWindow
GetDC
GetWindowDC
GetSystemMetrics
GetClassLongA
GetWindowTextLengthA
RegisterClassA
GetWindowLongA
GetWindowTextA
IsWindowVisible
GetActiveWindow
BeginPaint
advapi32
RegOpenKeyExA
GetUserNameA
IsTextUnicode
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
version
VerLanguageNameA
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ