Static task
static1
Behavioral task
behavioral1
Sample
4462593466a4a389a5d6f2d4dbca671c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4462593466a4a389a5d6f2d4dbca671c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4462593466a4a389a5d6f2d4dbca671c_JaffaCakes118
-
Size
171KB
-
MD5
4462593466a4a389a5d6f2d4dbca671c
-
SHA1
88b0510c0f15c3ae07f2069928c9ff4c21033a1d
-
SHA256
752c2ff53cbdb3733cf865ca8f40bd0a31b64fe14d7245b60de5db202445cf50
-
SHA512
f0ff1231b940cb24a69b1db793ae07bcdb229830771692d614c1cd5d0d74bf9c6ad85e37fea51ee27aa99af2bfa95549efaa85efca93d5d56a1bd6c033c29747
-
SSDEEP
3072:OSDFKT6E4Os9p7/04b2OEgNlen1585fEE4D2+lZvFQrLHZP5vVjez7DzW:OShKvfAM+NqE4DRZvFUJry/D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4462593466a4a389a5d6f2d4dbca671c_JaffaCakes118
Files
-
4462593466a4a389a5d6f2d4dbca671c_JaffaCakes118.exe windows:4 windows x86 arch:x86
18b5365145e7e11902225e1710a2704e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetAtomNameA
GetConsoleCP
VirtualProtect
GetVersion
HeapReAlloc
WaitForSingleObject
GlobalSize
GetCommandLineA
SetLastError
GetUserDefaultLangID
GetConsoleDisplayMode
ResumeThread
GetTickCount
GlobalUnlock
HeapCreate
InterlockedExchange
WaitForMultipleObjects
LoadLibraryExA
CompareFileTime
GetModuleHandleA
user32
AnyPopup
FillRect
EndPaint
DrawTextA
SetForegroundWindow
BeginPaint
DragDetect
GetFocus
ShowWindow
GetClassNameA
GetParent
ReleaseDC
CreateIcon
wsprintfA
GetWindow
FrameRect
GetCursorPos
GetDC
GetTitleBarInfo
rastapi
AddPorts
DeviceConnect
PortClose
DeviceListen
DeviceDone
quartz
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ