Static task
static1
Behavioral task
behavioral1
Sample
0ff8039cfebebe18eb475b92f97b3ce3_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0ff8039cfebebe18eb475b92f97b3ce3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0ff8039cfebebe18eb475b92f97b3ce3_JaffaCakes118
-
Size
634KB
-
MD5
0ff8039cfebebe18eb475b92f97b3ce3
-
SHA1
d574a9cf03b50ca9923981b45e5ce4d3c88aea11
-
SHA256
ae0acc466e1f44d3eb7204d00ceb205bfd2e0fee4e173a7555f4a735fcd403f4
-
SHA512
e91673009a92e1c97b81d77bb69475f73592694b89bd2dc6255516227824a0ec3c737c36225167861b204a1130fb08417eea8e0462f1f1a249867e2d2bc58b2f
-
SSDEEP
12288:9DQMq32QLJ8ubcJBnzWpOalcZxNp/UwdMrPDP4OSskeZrLYkucoQyS7xjOx:vGxhmBnip1lUp/UzrP8OSc5+kxjOx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ff8039cfebebe18eb475b92f97b3ce3_JaffaCakes118
Files
-
0ff8039cfebebe18eb475b92f97b3ce3_JaffaCakes118.exe windows:4 windows x86 arch:x86
af4279f7a8de615bf0f4eb5f2c8f6cf5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
VirtualProtect
GlobalFree
EnterCriticalSection
GlobalAddAtomA
LoadLibraryExA
RaiseException
Sleep
GetLocaleInfoA
CloseHandle
GetACP
GetDriveTypeA
InterlockedExchange
GetStdHandle
SetConsoleOutputCP
LockResource
GlobalDeleteAtom
GetLastError
IsBadReadPtr
SetErrorMode
FileTimeToLocalFileTime
user32
GetWindowTextA
ReleaseDC
SetForegroundWindow
ClipCursor
GetWindow
GetClassNameA
GetParent
IsIconic
GetCursorPos
BeginPaint
wsprintfA
GetActiveWindow
DrawEdge
GetFocus
ShowWindow
DrawTextA
EndPaint
GetMenuItemInfoA
ValidateRect
httpapi
HttpAddUrl
HttpCreateHttpHandle
HttpRemoveUrl
HttpTerminate
HttpInitialize
msutb
GetPopupTipbar
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ