Static task
static1
Behavioral task
behavioral1
Sample
6018bc1efa13f9dc5565e1d235bf7a64_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6018bc1efa13f9dc5565e1d235bf7a64_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
6018bc1efa13f9dc5565e1d235bf7a64_JaffaCakes118
-
Size
415KB
-
MD5
6018bc1efa13f9dc5565e1d235bf7a64
-
SHA1
a030cdaf8d4882e55bd69576865fae3ae6fd5f11
-
SHA256
a5f2a9b4b01664b876704e94b800e3a51e95bd7aa953c806d5104a978bfed1cb
-
SHA512
aba58d1d4da392f74586d14c368550c3eb00ea81f77ae58feb3138d332a01d9c9b9cb9894b4c113578bbfbe67ace0cc9618911c6d082bbcfc628a4d0bbbe8fee
-
SSDEEP
6144:L1ojUwD3TilJTq4y+ydvMQp7Tmd7xG8twYU42vw:LKowTWTq4yzd/tS7U8tEn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6018bc1efa13f9dc5565e1d235bf7a64_JaffaCakes118
Files
-
6018bc1efa13f9dc5565e1d235bf7a64_JaffaCakes118.exe windows:4 windows x86 arch:x86
0069b30a42c34236871547347ac861e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
EnterCriticalSection
InterlockedExchange
GetLastError
GetStdHandle
GetLocaleInfoA
LockResource
Sleep
GlobalFree
GetCommandLineA
GetFileAttributesA
GetACP
GetSystemDirectoryA
RaiseException
SetErrorMode
CloseHandle
GlobalDeleteAtom
GetLogicalDrives
GlobalAddAtomA
LoadLibraryExA
HeapCreate
user32
FrameRect
ReleaseDC
GetParent
BeginPaint
GetWindowTextA
ShowWindow
IsIconic
DrawTextA
DrawEdge
GetCursorPos
GetMenuItemInfoA
SetForegroundWindow
GetFocus
GetClassNameA
GetActiveWindow
EndPaint
ValidateRect
GetWindow
wsprintfA
httpapi
HttpAddUrl
HttpCreateHttpHandle
HttpTerminate
HttpInitialize
HttpRemoveUrl
wshtcpip
WSHNotify
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ