Static task
static1
Behavioral task
behavioral1
Sample
4858e9e22707044718be269ca99f899c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4858e9e22707044718be269ca99f899c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4858e9e22707044718be269ca99f899c_JaffaCakes118
-
Size
193KB
-
MD5
4858e9e22707044718be269ca99f899c
-
SHA1
8e2c34f4353b35e70d012f849a7627069cd67491
-
SHA256
68d35bb52188c8b708ffee680ce29bad3674ef3fd914811deebb0020654ac1dc
-
SHA512
d04da4e2a19d9edbb0d198e54edd057fc1911d59809af9c29c52289995d2c9e8dd127726f43565ca6f34d56b1fd238bb237f45d2ff08ea40f09f0065a4a8decb
-
SSDEEP
6144:luunvQP0sP7wBfndGZ/1+UcJ0oVzQ6OCn9IM:FI06kBf2/11cJ3xO6N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4858e9e22707044718be269ca99f899c_JaffaCakes118
Files
-
4858e9e22707044718be269ca99f899c_JaffaCakes118.exe windows:4 windows x86 arch:x86
b050d59ca7c08b4e1c516a2bcebd8854
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
GlobalGetAtomNameA
Sleep
GetTickCount
LoadLibraryW
GetPrivateProfileStringW
GetModuleFileNameW
GetPrivateProfileIntW
InitializeCriticalSection
MulDiv
GetVersionExA
GetVersionExW
GetProcAddress
LockResource
EnumResourceTypesW
FindFirstFileW
FreeLibrary
DeleteCriticalSection
GlobalSize
LoadLibraryA
GetModuleHandleW
IsDBCSLeadByteEx
FindClose
WritePrivateProfileStringW
LoadResource
MultiByteToWideChar
GetLocaleInfoW
shell32
DllGetVersion
ShellExecuteExA
SHFileOperationW
ShellExecuteExW
SHGetFileInfoA
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteW
SHGetFolderPathW
CommandLineToArgvW
Shell_NotifyIconA
wininet
InternetReadFile
HttpSendRequestA
InternetOpenA
InternetCrackUrlA
InternetCloseHandle
InternetTimeToSystemTime
InternetConnectA
HttpQueryInfoA
HttpOpenRequestA
InternetErrorDlg
InternetTimeFromSystemTime
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ