Static task
static1
Behavioral task
behavioral1
Sample
3903606e917be2f12701bc2331869035_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3903606e917be2f12701bc2331869035_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3903606e917be2f12701bc2331869035_JaffaCakes118
-
Size
312KB
-
MD5
3903606e917be2f12701bc2331869035
-
SHA1
54e3ba4e915078eca69032802af6bf9b172d7837
-
SHA256
dab70c9386e2b8dfe1f97dfc99381c54c2d766ab1a72349714ec17f675ebcf95
-
SHA512
4c1bef11581b27e30ad004c64f05d77b1748be5ebe8055b5b27fe64da6e6410cbaa72b5d8c2ac4e9add8c0a539abc9865b840947c74e581154c0a3b9fcfad599
-
SSDEEP
6144:pNd+NsHYcfGkNdCEW/gh95Re3YIAR6y0SROGN+4PrVAuJq:fd+uH3fGoCEW/49zwdGI4PrVAQq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3903606e917be2f12701bc2331869035_JaffaCakes118
Files
-
3903606e917be2f12701bc2331869035_JaffaCakes118.exe windows:4 windows x86 arch:x86
90e9ced3dda377e6ac2413af0461c3d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
InterlockedExchange
GetStdHandle
CloseHandle
GlobalAddAtomA
GetACP
GetLocaleInfoA
LockResource
GlobalFree
IsBadReadPtr
HeapCreate
GetDriveTypeA
RaiseException
LoadLibraryExA
GlobalDeleteAtom
Sleep
SetConsoleOutputCP
SetErrorMode
VirtualProtect
GetLastError
FileTimeToLocalFileTime
user32
GetCursorPos
GetFocus
DrawTextA
wsprintfA
DrawEdge
GetWindow
ClipCursor
BeginPaint
SetForegroundWindow
GetParent
GetClassNameA
GetActiveWindow
ValidateRect
GetWindowTextA
GetMenuItemInfoA
EndPaint
ReleaseDC
IsIconic
ShowWindow
httpapi
HttpCreateHttpHandle
HttpRemoveUrl
HttpInitialize
HttpAddUrl
HttpTerminate
msutb
GetPopupTipbar
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ