Static task
static1
Behavioral task
behavioral1
Sample
609d8c88a238e0a65e9ca0ab8ccf8131_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
609d8c88a238e0a65e9ca0ab8ccf8131_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
609d8c88a238e0a65e9ca0ab8ccf8131_JaffaCakes118
-
Size
634KB
-
MD5
609d8c88a238e0a65e9ca0ab8ccf8131
-
SHA1
f011b130b316f7ab985641d4274a636de244f223
-
SHA256
b6210c3bb08a2560c4931aa4ad4128c60f6fbc8f60afe1679fd7d8eb1a6e4afe
-
SHA512
d04bd93b7a73933064f9194aea78bc84f10047d650edc39a74291eac329cbdc18c7796151222dd83ccdaae8b05fe5826cad72e9253f3695aa3653abb40d50d92
-
SSDEEP
12288:yzJKM+WdsUNzl4iaItQY+afif0jOH/Yue6BzD3nsM3n5JMq2NqsDoSBp+F:yKMbeiaIxXfif0Qk0T33nenO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 609d8c88a238e0a65e9ca0ab8ccf8131_JaffaCakes118
Files
-
609d8c88a238e0a65e9ca0ab8ccf8131_JaffaCakes118.exe windows:4 windows x86 arch:x86
76913cd9e8c9e240671ba57888b2e52b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetLastError
GlobalAddAtomA
SetErrorMode
HeapCreate
LockResource
VirtualProtect
Sleep
GetLocaleInfoA
InterlockedExchange
GetACP
GetCommandLineA
GetSystemDirectoryA
RaiseException
GetStdHandle
GlobalFree
LoadLibraryExA
GetFileAttributesA
GlobalDeleteAtom
GetLogicalDrives
EnterCriticalSection
user32
FrameRect
GetWindow
GetParent
GetMenuItemInfoA
GetFocus
GetCursorPos
wsprintfA
DrawEdge
DrawTextA
GetClassNameA
BeginPaint
EndPaint
SetForegroundWindow
IsIconic
ReleaseDC
ValidateRect
GetActiveWindow
GetWindowTextA
ShowWindow
httpapi
HttpCreateHttpHandle
HttpTerminate
HttpInitialize
HttpAddUrl
HttpRemoveUrl
wshtcpip
WSHNotify
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ