Static task
static1
Behavioral task
behavioral1
Sample
294ca73ba0e2ed787703cacf26988008_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
294ca73ba0e2ed787703cacf26988008_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
294ca73ba0e2ed787703cacf26988008_JaffaCakes118
-
Size
311KB
-
MD5
294ca73ba0e2ed787703cacf26988008
-
SHA1
c1dd4eeaca07c783eefa9e7ac31bc64cc0409fb7
-
SHA256
875821bf29018e7cbbe4e0047d5b5354ab2ec649cb417ab79c50bcba36026274
-
SHA512
db2e0fb1bb2256bafaecc5335dece6363b6baa6377bc4dcad95221c792dd557ad714a090eeb2aed475366fcc917fa98e07e2b1f68a0efdf151acbcb03aeb41ac
-
SSDEEP
6144:50d+NsHYcfGkNdCEW/gh95Re3YIAR6y0SROGN+4PrVAuJq:yd+uH3fGoCEW/49zwdGI4PrVAQq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 294ca73ba0e2ed787703cacf26988008_JaffaCakes118
Files
-
294ca73ba0e2ed787703cacf26988008_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e75f27ec99fb346de4aa949bcda33a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
GlobalFree
GetLastError
FileTimeToLocalFileTime
EnterCriticalSection
GlobalAddAtomA
IsBadReadPtr
Sleep
CloseHandle
HeapCreate
SetErrorMode
VirtualProtect
InterlockedExchange
LockResource
GetACP
GetStdHandle
GetDriveTypeA
LoadLibraryExA
SetConsoleOutputCP
GlobalDeleteAtom
RaiseException
user32
GetParent
GetActiveWindow
GetWindowTextA
GetFocus
BeginPaint
IsIconic
GetWindow
DrawTextA
wsprintfA
GetClassNameA
ClipCursor
ValidateRect
GetMenuItemInfoA
SetForegroundWindow
GetCursorPos
ReleaseDC
EndPaint
ShowWindow
DrawEdge
httpapi
HttpRemoveUrl
HttpTerminate
HttpAddUrl
HttpCreateHttpHandle
HttpInitialize
msutb
GetPopupTipbar
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ