Static task
static1
Behavioral task
behavioral1
Sample
4a82471b1cdc5f3661b0d8c40f8046cd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4a82471b1cdc5f3661b0d8c40f8046cd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4a82471b1cdc5f3661b0d8c40f8046cd_JaffaCakes118
-
Size
263KB
-
MD5
4a82471b1cdc5f3661b0d8c40f8046cd
-
SHA1
ce34d8c2ebd1ae8deac602d89625871be0c4b3c7
-
SHA256
66e69609fd141fe7c16c728fa8f02280d1dc2994b93f78e7fb2e745ccfedc644
-
SHA512
d4caf454ef9df0d94c7b27b3e5217c873ec81ae1bbab93266a39dc9f0e83a97af61ad18191f45c709e29b81c2214f7fbf4d4b04eecfe35dc49add84167e250d0
-
SSDEEP
6144:n0c3knldodUmC33e3sPaeBFSflE9tM3OwJki2zP0z+TzTj:0c3k2C3ykdwGRTr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a82471b1cdc5f3661b0d8c40f8046cd_JaffaCakes118
Files
-
4a82471b1cdc5f3661b0d8c40f8046cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
9fd0ae37809fcca3d405cba5691c9c36
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wtsapi32
WTSEnumerateSessionsW
WTSQuerySessionInformationW
WTSFreeMemory
WTSRegisterSessionNotification
oleacc
LresultFromObject
AccessibleObjectFromPoint
kernel32
SetUnhandledExceptionFilter
HeapFree
GetModuleHandleA
GetLocaleInfoA
GetACP
HeapFree
InterlockedExchange
MultiByteToWideChar
CloseHandle
GetSystemTime
HeapSize
CreateFileW
GetCurrentThreadId
GetThreadLocale
HeapAlloc
QueryPerformanceCounter
GetEnvironmentVariableA
WideCharToMultiByte
lstrlenW
IsDebuggerPresent
GetCurrentProcess
SystemTimeToFileTime
LoadLibraryExW
EnumResourceTypesA
GetCurrentProcessId
LocalAlloc
GetProcessHeap
GetTickCount
LoadLibraryW
CompareFileTime
GetSystemTimeAsFileTime
GetStdHandle
RaiseException
TerminateProcess
HeapDestroy
HeapReAlloc
UnhandledExceptionFilter
CreateProcessA
WriteFile
GetStartupInfoA
Sleep
InterlockedCompareExchange
lstrlenA
lstrcpynW
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ