Static task
static1
Behavioral task
behavioral1
Sample
288fb9a1057161201259884750685b0f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
288fb9a1057161201259884750685b0f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
288fb9a1057161201259884750685b0f_JaffaCakes118
-
Size
415KB
-
MD5
288fb9a1057161201259884750685b0f
-
SHA1
626458c3eea16b57467980da43e2f916b326a5e2
-
SHA256
d0f6e350035b0b8dcbe4b48dd354cfe979d375dad9bc99271e3a1c604a275ed5
-
SHA512
b4a241c97a0de230aad35f190ec865fba4133cfe020ee9be874930f16328e14a13360c2eeb36353fa893576d01931db621b307e41b68e96dd504317a35305ee5
-
SSDEEP
12288:JZ6TIoft2yugll2jnAaeX6mXM3W4/Plf:JZ6glQlCn0X6X3WoNf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 288fb9a1057161201259884750685b0f_JaffaCakes118
Files
-
288fb9a1057161201259884750685b0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
96d825348894de2b7e77bcbcc7aec92e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
GetLastError
IsBadReadPtr
InterlockedExchange
RaiseException
HeapCreate
SetErrorMode
LockResource
GetCommandLineA
GetLocaleInfoA
GlobalDeleteAtom
CloseHandle
GetStdHandle
GetACP
GlobalAddAtomA
VirtualProtect
Sleep
LoadLibraryExA
GlobalFree
EnterCriticalSection
GetLogicalDrives
user32
DrawTextA
ValidateRect
EndPaint
GetActiveWindow
ReleaseDC
SetForegroundWindow
GetWindowTextA
DrawEdge
wsprintfA
FrameRect
GetWindow
BeginPaint
GetParent
GetFocus
GetMenuItemInfoA
IsIconic
ShowWindow
GetCursorPos
GetClassNameA
httpapi
HttpTerminate
HttpRemoveUrl
HttpCreateHttpHandle
HttpInitialize
HttpAddUrl
msutb
GetPopupTipbar
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ