Static task
static1
Behavioral task
behavioral1
Sample
f0118e623534c665ea28f520d4f1e550_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0118e623534c665ea28f520d4f1e550_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0118e623534c665ea28f520d4f1e550_JaffaCakes118
-
Size
242KB
-
MD5
f0118e623534c665ea28f520d4f1e550
-
SHA1
4c9ab2a7d5a1998c3fdaf06a59f6ca74bb6da9e8
-
SHA256
cb86020e2c2b43ea78f63ffbdfc97b2a6d1dd824f51fd19bdc804c0158d0b16a
-
SHA512
db3cdc75b2d997708261878500b29e5836c697507a97c069a103bd2294e456e01c5cfa08f934146541dd359e57bc9e14c71dd9c1bb0d4fbc1d958aeb7d44e11e
-
SSDEEP
6144:B3EEEEEEEEEEEEEEEEryrcsyXzt9SzgCponilfKlZe83c6EPviJgiXz:B3EEEEEEEEEEEEEEEEryrcsSB9SzgcQd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0118e623534c665ea28f520d4f1e550_JaffaCakes118
Files
-
f0118e623534c665ea28f520d4f1e550_JaffaCakes118.exe windows:4 windows x86 arch:x86
3416e22ae8f9809ae927a7262d7e1e56
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
SetConsoleOutputCP
GetLastError
LockResource
Sleep
InterlockedExchange
LoadLibraryExA
VirtualProtect
GlobalDeleteAtom
RaiseException
IsBadReadPtr
GetLocaleInfoA
CloseHandle
GetDriveTypeA
GlobalFree
GetACP
GetStdHandle
FileTimeToLocalFileTime
SetErrorMode
EnterCriticalSection
HeapCreate
user32
wsprintfA
GetMenuItemInfoA
DrawEdge
GetCursorPos
EndPaint
GetParent
BeginPaint
ReleaseDC
GetWindowTextA
GetActiveWindow
GetClassNameA
IsIconic
SetForegroundWindow
DrawTextA
ValidateRect
ShowWindow
GetFocus
GetWindow
ClipCursor
httpapi
HttpAddUrl
HttpInitialize
HttpCreateHttpHandle
HttpRemoveUrl
HttpTerminate
msutb
GetPopupTipbar
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ