Static task
static1
Behavioral task
behavioral1
Sample
5e21159ba3df594dc4057cc98b21af23_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e21159ba3df594dc4057cc98b21af23_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e21159ba3df594dc4057cc98b21af23_JaffaCakes118
-
Size
415KB
-
MD5
5e21159ba3df594dc4057cc98b21af23
-
SHA1
814c5cf26c9c832ba8240de373304ac3468eafd9
-
SHA256
41b726d6957f1ec5ef72794ba1a8cbffa24960e4a7106df9b2dd51b36f2336f0
-
SHA512
aa0c7dea95b30eac3bb8ce230b786f821b925ecd5228766d1bd49c04ce6a5c7dfb4a8b566b779cf875a957ff85edd9145d4491036e814d54eba3e61167b4ee09
-
SSDEEP
6144:Mh1ojUwD3TilJTq4y+ydvMQp7Tmd7xG8twYU42vw:kKowTWTq4yzd/tS7U8tEn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e21159ba3df594dc4057cc98b21af23_JaffaCakes118
Files
-
5e21159ba3df594dc4057cc98b21af23_JaffaCakes118.exe windows:4 windows x86 arch:x86
904256119be0a30d3a2573a0e22b1518
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetStdHandle
GlobalFree
GetLocaleInfoA
VirtualProtect
GetFileAttributesA
InterlockedExchange
RaiseException
SetErrorMode
EnterCriticalSection
GetCommandLineA
GetSystemDirectoryA
LoadLibraryExA
HeapCreate
GlobalAddAtomA
CloseHandle
GetLogicalDrives
GetLastError
Sleep
LockResource
GlobalDeleteAtom
user32
ShowWindow
EndPaint
GetWindow
GetCursorPos
GetParent
IsIconic
BeginPaint
SetForegroundWindow
wsprintfA
GetFocus
GetWindowTextA
ReleaseDC
DrawTextA
GetMenuItemInfoA
DrawEdge
ValidateRect
FrameRect
GetActiveWindow
GetClassNameA
httpapi
HttpAddUrl
HttpCreateHttpHandle
HttpTerminate
HttpRemoveUrl
HttpInitialize
wshtcpip
WSHNotify
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ