Static task
static1
Behavioral task
behavioral1
Sample
4076bdb7896c4c2d728f988d23bc476b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4076bdb7896c4c2d728f988d23bc476b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4076bdb7896c4c2d728f988d23bc476b_JaffaCakes118
-
Size
512KB
-
MD5
4076bdb7896c4c2d728f988d23bc476b
-
SHA1
379278eb366a25a5e6f07f299a0ffc15b3942d80
-
SHA256
2073864d9cbea7fb5588945de87e28b9aaf7b515c93e606f9fe4d1e9e2020072
-
SHA512
0a4f2c3948d9a35f396845798041b3de5d7feb99b80ff6f5b5b09375a78a0d708b3926beb3a3482a26baae6c5f3065db32c5cf15d844381421ac2771ee9a4f44
-
SSDEEP
12288:7F/52FYhsEfH+YcjKFtNhDPGXDer0GotFrucBcW:xQFssY+4ZGxzrj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4076bdb7896c4c2d728f988d23bc476b_JaffaCakes118
Files
-
4076bdb7896c4c2d728f988d23bc476b_JaffaCakes118.exe windows:4 windows x86 arch:x86
5bb95ec5755618297277d63189c67e25
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect
user32
GetKeyboardType
MessageBoxA
advapi32
RegQueryValueExA
oleaut32
SysFreeString
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
wininet
InternetReadFile
ws2_32
gethostname
wsock32
WSACleanup
winmm
waveInUnprepareHeader
msvfw32
DrawDibDraw
Sections
CODE Size: - Virtual size: 615KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 26KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 505KB - Virtual size: 505KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ