Static task
static1
Behavioral task
behavioral1
Sample
4c194f2347ee3c482d5835ef806529cc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4c194f2347ee3c482d5835ef806529cc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4c194f2347ee3c482d5835ef806529cc_JaffaCakes118
-
Size
119KB
-
MD5
4c194f2347ee3c482d5835ef806529cc
-
SHA1
ebf0fca83684ef35ce28f0b6c89ab7d77c100097
-
SHA256
4c2a73a04940906454c9bffa89afbbd7f391f3669a93b75030f081044a3a1c22
-
SHA512
7564d126caf0ac4121520208b4676fa7accc0ff8f96893b9d038d96d4d44223fb32325822b695e2f259464eff499d91813173f5118545809a3b11461c3f79153
-
SSDEEP
3072:MXsbB5FM3qabtlnQ1lahDIAnceX22JvSczT:tbB5FJOfQy9nn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c194f2347ee3c482d5835ef806529cc_JaffaCakes118
Files
-
4c194f2347ee3c482d5835ef806529cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
0ecbb6d5666f80498c0c9e35d7f129d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
LoadLibraryA
GetProcessHeap
GetStringTypeW
Heap32Next
GetConsoleAliasW
SetCurrentDirectoryA
DeleteFileA
Heap32First
CreateFileMappingW
GetConsoleTitleA
CreateMailslotW
SetEndOfFile
DeleteFileA
DeleteFileA
VirtualAlloc
GetShortPathNameW
SetEnvironmentVariableA
GetStringTypeW
GetModuleHandleW
GetACP
SetFilePointer
WriteConsoleW
msoeacct
ValidEmailAddress
DllGetClassObject
GetDllMajorVersion
DllCanUnloadNow
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avr Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ