Static task
static1
Behavioral task
behavioral1
Sample
0abfb20b868bd62a7620e18567f36354_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0abfb20b868bd62a7620e18567f36354_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0abfb20b868bd62a7620e18567f36354_JaffaCakes118
-
Size
416KB
-
MD5
0abfb20b868bd62a7620e18567f36354
-
SHA1
d459fbcd94316c0986774b1479dfa2a15bc07fc3
-
SHA256
cdcd73526b8effaf06c984b3a8db487aff914bd7af5b8b03d360d6cca983747c
-
SHA512
cd6d15307f2986c0786db9f7ee1a47dc90465d00269619fea2d6fe2aaf84022b2c5ea235af73a9b7de8a1f9d3c2e984c770dd18919ddeb5409aa6a6107dcf268
-
SSDEEP
12288:4Z6TIoft2yugll2jnAaeX6mXM3W4/Plf:4Z6glQlCn0X6X3WoNf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0abfb20b868bd62a7620e18567f36354_JaffaCakes118
Files
-
0abfb20b868bd62a7620e18567f36354_JaffaCakes118.exe windows:4 windows x86 arch:x86
573a7b0aa886b44f70deb9755f89920e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetACP
EnterCriticalSection
LoadLibraryExA
CloseHandle
LockResource
IsBadReadPtr
GlobalDeleteAtom
GetLogicalDrives
VirtualProtect
GlobalAddAtomA
GetLastError
RaiseException
HeapCreate
GetStdHandle
FileTimeToLocalFileTime
GetCommandLineA
GlobalFree
SetErrorMode
GetLocaleInfoA
Sleep
user32
GetFocus
ReleaseDC
DrawTextA
GetWindow
ValidateRect
GetCursorPos
GetParent
DrawEdge
GetClassNameA
GetWindowTextA
GetMenuItemInfoA
ShowWindow
FrameRect
IsIconic
wsprintfA
SetForegroundWindow
GetActiveWindow
BeginPaint
EndPaint
httpapi
HttpTerminate
HttpRemoveUrl
HttpInitialize
HttpAddUrl
HttpCreateHttpHandle
msutb
GetPopupTipbar
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ