Static task
static1
Behavioral task
behavioral1
Sample
4e62ce349bf0b83eb5290e166f8b1640_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4e62ce349bf0b83eb5290e166f8b1640_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4e62ce349bf0b83eb5290e166f8b1640_JaffaCakes118
-
Size
220KB
-
MD5
4e62ce349bf0b83eb5290e166f8b1640
-
SHA1
2cfed0ac41cef40837ae9efff2ac53a0fcb4a7c6
-
SHA256
cc3a14fc4597290919d7f8b806634f722a50eead9319bd115a84cb0cd3691227
-
SHA512
4204502044adb6c429d85eea7ad656f6677361e716f606a44b469006e9fc33fd527d12a58255a46abf192f80e77256ab434f211ffefd7eba098a8236d2b93ebc
-
SSDEEP
3072:4Vnaqq7y2RpRlrtowJL1rnEbgQInHNY5aMdflZs68jv:ynaqq7J3iuhWgrntShyv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e62ce349bf0b83eb5290e166f8b1640_JaffaCakes118
Files
-
4e62ce349bf0b83eb5290e166f8b1640_JaffaCakes118.exe windows:4 windows x86 arch:x86
4430858c77c31cdb02a0d72807a99dcf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
DestroyWindow
PostQuitMessage
DefWindowProcA
CreateWindowExA
LoadCursorA
LoadIconA
RegisterClassExA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadBitmapA
MoveWindow
SetWindowPos
SetFocus
InvalidateRect
EnableWindow
FlashWindowEx
GetParent
DeferWindowPos
IsChild
wsprintfA
SetWindowLongA
GetScrollInfo
GetWindowLongA
kernel32
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
CloseHandle
HeapReAlloc
HeapAlloc
OutputDebugStringW
RtlUnwind
LoadLibraryExW
IsProcessorFeaturePresent
IsDebuggerPresent
ReadFile
GetStartupInfoA
lstrcatA
lstrlenA
lstrcpyA
GetLastError
GetStringTypeW
GetModuleFileNameW
GetCommandLineA
SetLastError
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
CreateFileW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
comctl32
ord17
Sections
.text Size: 168KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ