Static task
static1
Behavioral task
behavioral1
Sample
35b06eee39dbe5e1725bb5597d3e95d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35b06eee39dbe5e1725bb5597d3e95d9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
35b06eee39dbe5e1725bb5597d3e95d9_JaffaCakes118
-
Size
16KB
-
MD5
35b06eee39dbe5e1725bb5597d3e95d9
-
SHA1
671b90163ec2e181d14629a071abbe365061f810
-
SHA256
9f124e244347b8bfd52549a7c735cf21e56ce61977307980f66b62b1a7291e4d
-
SHA512
992e4319ca53f3583ef3181f0fa7801c5cfff170a126fbbac55f3192d8a5ba8a2b6450f1554b9027272625226915a1bf7126e545e001411a30cfcf34573c31d1
-
SSDEEP
384:vHhkpzjpWO4kDF51OufshAjaJEmOvgmJsS1JlVVR5Tf:SIl8VPgmJsSbl3ff
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35b06eee39dbe5e1725bb5597d3e95d9_JaffaCakes118
Files
-
35b06eee39dbe5e1725bb5597d3e95d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
28b140c497f8d859ebe0f0fb9c41f358
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
GetFileAttributesA
Sleep
GetSystemDirectoryA
GetLastError
GlobalFree
GetCommandLineA
RaiseException
CloseHandle
GetStdHandle
GlobalDeleteAtom
GlobalAddAtomA
EnterCriticalSection
GetACP
VirtualProtect
SetErrorMode
HeapCreate
InterlockedExchange
LockResource
GetLocaleInfoA
GetLogicalDrives
user32
DrawTextA
ReleaseDC
GetCursorPos
BeginPaint
SetForegroundWindow
DrawEdge
GetWindow
ShowWindow
GetMenuItemInfoA
EndPaint
GetClassNameA
GetActiveWindow
wsprintfA
FrameRect
GetParent
IsIconic
GetFocus
ValidateRect
GetWindowTextA
httpapi
HttpAddUrl
HttpTerminate
HttpRemoveUrl
HttpCreateHttpHandle
HttpInitialize
wshtcpip
WSHNotify
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ