Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4f4a4737f37007cca77e4b175c1a97b6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_4f4a4737f37007cca77e4b175c1a97b6.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_4f4a4737f37007cca77e4b175c1a97b6
-
Size
165KB
-
MD5
4f4a4737f37007cca77e4b175c1a97b6
-
SHA1
01b331f18e1aef85e62c74ab48d5e8b17b95b8c0
-
SHA256
1b4a1bf079f1e92a89f4575056dc6ba8bfb8e084c3e6fb509124a8a06129ff18
-
SHA512
6bd70af46e9bafae1d2fedb98ebbcc17a74f1296fd8673e7a870416f8f6cc2f9fc3eed60ea3ed731e86de476109a1a998a4db534153be441a9ef38e73d69ff06
-
SSDEEP
3072:PGmj6ddD5mmWMbWFgx5DY7giA19NPyxHApWp09pf0rSa8y121:PGmjsG1Iugx5DY7nw9NP0oWp2Dp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_4f4a4737f37007cca77e4b175c1a97b6
Files
-
JaffaCakes118_4f4a4737f37007cca77e4b175c1a97b6.exe windows:4 windows x86 arch:x86
406a7b8c75e71349925a3028d3da6ff1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleMode
UnmapViewOfFile
GetCalendarInfoA
GetVersionExA
TlsSetValue
HeapAlloc
CreateProcessW
GetEnvironmentVariableW
MoveFileExW
WaitForSingleObject
CreateThread
SetEvent
GetConsoleCP
GetProcessHeap
TlsGetValue
SetLastError
GetModuleHandleW
WriteConsoleW
TlsAlloc
GetVersionExW
InterlockedIncrement
EnumResourceNamesA
CreateFileMappingA
ExitProcess
GetExitCodeProcess
GetProcAddress
GetModuleHandleA
FindFirstFileW
CreateDirectoryW
HeapFree
FlushFileBuffers
CreateFileA
MapViewOfFile
GetTempPathW
LoadLibraryExW
TlsFree
CreateFileW
GetLastError
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
ole32
CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ