Static task
static1
Behavioral task
behavioral1
Sample
45ca46bd6880f11b4b7139320520f26f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45ca46bd6880f11b4b7139320520f26f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
45ca46bd6880f11b4b7139320520f26f_JaffaCakes118
-
Size
1.5MB
-
MD5
45ca46bd6880f11b4b7139320520f26f
-
SHA1
7279f5251b129bd1323f647e311629254dbee6c1
-
SHA256
b820c1714f8496b71b7c9b5dd65b6b2db3e3060f2b226235c9c4bae75ce86789
-
SHA512
f9cebf0b9d3836bc79d47a3da22bbc52d6d030ded47f1f9bbfc8b4234cce9addc201cd787181a8eb97fbb276a4f0747ae8dc19f42d553f67195dd99cf708c9cf
-
SSDEEP
24576:fAiqudLYYAoT6ScYP9mK82Ag+E9Tj5tCm2OK39lN9GMhuPhS6Es2UuWdjFzM3reK:dncYP9mG9Tf2h11hu5S6EfKjFg3reK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45ca46bd6880f11b4b7139320520f26f_JaffaCakes118
Files
-
45ca46bd6880f11b4b7139320520f26f_JaffaCakes118.exe windows:4 windows x86 arch:x86
196afc9a16f312a91f5bd3e17d8f5c29
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
comctl32
InitCommonControls
comdlg32
GetSaveFileNameA
gdi32
BitBlt
CombineRgn
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
ExtCreateRegion
GetObjectA
GetTextExtentPoint32A
SelectObject
SetBkMode
SetTextAlign
SetTextColor
TextOutA
kernel32
AddAtomA
CreateMutexA
CreateSemaphoreA
ExitProcess
FindAtomA
FindResourceA
GetAtomNameA
GetCommandLineA
GetLastError
GetModuleHandleA
GetStartupInfoA
GetTempPathA
GlobalAlloc
GlobalFree
GlobalLock
GlobalReAlloc
GlobalUnlock
InterlockedDecrement
InterlockedIncrement
LoadResource
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
msvcrt
_fdopen
_read
_strdup
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_ctype
_errno
_fstati64
_iob
_isctype
_lseeki64
_onexit
_pctype
_setmode
_strnicmp
_vsnprintf
abort
atexit
exit
fclose
fflush
fopen
fprintf
free
localeconv
malloc
memchr
memcpy
memmove
memset
setlocale
setvbuf
signal
strcmp
strcoll
strcpy
strftime
strlen
strtod
strxfrm
shell32
ShellExecuteA
user32
BeginPaint
CloseClipboard
CreateWindowExA
DefWindowProcA
DispatchMessageA
DrawStateA
EndPaint
GetClientRect
GetClipboardData
GetDC
GetMessageA
GetSystemMetrics
InvalidateRect
IsWindowVisible
KillTimer
LoadBitmapA
LoadCursorA
MessageBoxA
OpenClipboard
PostQuitMessage
RegisterClassExA
ReleaseDC
SendMessageA
SetRect
SetTimer
SetWindowPos
SetWindowRgn
ShowWindow
TranslateMessage
wininet
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
winmm
sndPlaySoundA
Sections
.text Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 54KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE