Static task
static1
Behavioral task
behavioral1
Sample
298a01f63e22a7303b625139ec2b01ff_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
298a01f63e22a7303b625139ec2b01ff_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
298a01f63e22a7303b625139ec2b01ff_JaffaCakes118
-
Size
416KB
-
MD5
298a01f63e22a7303b625139ec2b01ff
-
SHA1
db2207160c4d64c2c1b4ee002dada210f88e54cd
-
SHA256
c1bf99d44e9d7192ccd999bcff41c4b04ff0fd7a7d350aaee20f5f6760abe614
-
SHA512
3c0eeaa974793859d6cd963be851ee47fd3e1d412b0cb294b46490c88eaa83b16a876e48092d62739fde9614770a729d6561edbce63fa3dcddab77a4f35f7b27
-
SSDEEP
12288:LZ6TIoft2yugll2jnAaeX6mXM3W4/Plf:LZ6glQlCn0X6X3WoNf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 298a01f63e22a7303b625139ec2b01ff_JaffaCakes118
Files
-
298a01f63e22a7303b625139ec2b01ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
99d18cc43f13332d948a55be543033f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
IsBadReadPtr
GlobalFree
GetLogicalDrives
GetStdHandle
LockResource
GetCommandLineA
HeapCreate
InterlockedExchange
EnterCriticalSection
GlobalDeleteAtom
RaiseException
GetACP
Sleep
VirtualProtect
SetErrorMode
LoadLibraryExA
GetLocaleInfoA
CloseHandle
FileTimeToLocalFileTime
GlobalAddAtomA
user32
DrawTextA
GetFocus
GetCursorPos
BeginPaint
wsprintfA
GetParent
ReleaseDC
SetForegroundWindow
GetWindow
GetMenuItemInfoA
ShowWindow
GetWindowTextA
FrameRect
GetActiveWindow
ValidateRect
EndPaint
IsIconic
DrawEdge
GetClassNameA
httpapi
HttpRemoveUrl
HttpCreateHttpHandle
HttpAddUrl
HttpTerminate
HttpInitialize
msutb
GetPopupTipbar
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ