Static task
static1
Behavioral task
behavioral1
Sample
4b7521c6627c28a46dcbd4ec3c6db0e8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b7521c6627c28a46dcbd4ec3c6db0e8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b7521c6627c28a46dcbd4ec3c6db0e8_JaffaCakes118
-
Size
416KB
-
MD5
4b7521c6627c28a46dcbd4ec3c6db0e8
-
SHA1
3aee9b743f6cecf07ffb715192970902ffbcc292
-
SHA256
bdfdd83cf6e66dc34b8b61cdc5ac0440befd96a70b143f6e2df3bb330396185c
-
SHA512
1d79edea839466cdfe491d421e90ef373d8862127b2f616c6f83f7227a49446bb1b0b5f1c8cd9041589e95ae966a17847d64b931fbb3731b026c5c0b9ea73fa7
-
SSDEEP
12288:dZ6TIoft2yugll2jnAaeX6mXM3W4/Plf:dZ6glQlCn0X6X3WoNf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b7521c6627c28a46dcbd4ec3c6db0e8_JaffaCakes118
Files
-
4b7521c6627c28a46dcbd4ec3c6db0e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
99d18cc43f13332d948a55be543033f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
IsBadReadPtr
GlobalFree
GetLogicalDrives
GetStdHandle
LockResource
GetCommandLineA
HeapCreate
InterlockedExchange
EnterCriticalSection
GlobalDeleteAtom
RaiseException
GetACP
Sleep
VirtualProtect
SetErrorMode
LoadLibraryExA
GetLocaleInfoA
CloseHandle
FileTimeToLocalFileTime
GlobalAddAtomA
user32
DrawTextA
GetFocus
GetCursorPos
BeginPaint
wsprintfA
GetParent
ReleaseDC
SetForegroundWindow
GetWindow
GetMenuItemInfoA
ShowWindow
GetWindowTextA
FrameRect
GetActiveWindow
ValidateRect
EndPaint
IsIconic
DrawEdge
GetClassNameA
httpapi
HttpRemoveUrl
HttpCreateHttpHandle
HttpAddUrl
HttpTerminate
HttpInitialize
msutb
GetPopupTipbar
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ