Static task
static1
Behavioral task
behavioral1
Sample
f4eabd63dfb93a9e9563d57eb3a8a1ec_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f4eabd63dfb93a9e9563d57eb3a8a1ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4eabd63dfb93a9e9563d57eb3a8a1ec_JaffaCakes118
-
Size
12KB
-
MD5
f4eabd63dfb93a9e9563d57eb3a8a1ec
-
SHA1
ebc281576da3f1adbb0f2fc49983baa9edeca52f
-
SHA256
ec2bd759adad8a8d7aa2e712275d186deacb51305075cf9bc63dcc719ca7e085
-
SHA512
4ca2f93ce96a0c7d4d9863029432efce464c281446216b20094fee99288357c78b36a718fe29170c158fa78fd53d8db915de4e5779293ea64fcb3ab3e7457c38
-
SSDEEP
384:piiZdnNMd1NQmRhQV7Ak02jcWaZH4rSrip:BzNMdrQm++k02jnIH4Gr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4eabd63dfb93a9e9563d57eb3a8a1ec_JaffaCakes118
Files
-
f4eabd63dfb93a9e9563d57eb3a8a1ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
70a43fb7b975a2907a91a44a7182e770
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32First
CreateToolhelp32Snapshot
Sleep
lstrcmpiA
SetFileAttributesA
GetTickCount
GetTempPathA
CopyFileA
lstrcatA
GetModuleFileNameA
WinExec
GetSystemTime
GetLastError
CreateMutexA
MoveFileExA
GetStartupInfoA
GetModuleHandleA
Process32Next
CreateFileA
WriteFile
CloseHandle
DeleteFileA
user32
FindWindowA
ShowWindow
FindWindowExA
DefWindowProcA
PostQuitMessage
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
PostMessageA
IsWindowEnabled
SetForegroundWindow
wsprintfA
SendMessageA
UpdateWindow
advapi32
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
shell32
ShellExecuteA
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
remove
fscanf
sprintf
__CxxFrameHandler
strcpy
fopen
fprintf
fclose
_strcmpi
exit
strstr
memset
strlen
_except_handler3
_controlfp
__set_app_type
ws2_32
WSAStartup
gethostbyname
WSACleanup
wininet
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA
Sections
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ