Static task
static1
Behavioral task
behavioral1
Sample
628ffca0dfb674154e943617ec002414_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
628ffca0dfb674154e943617ec002414_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
628ffca0dfb674154e943617ec002414_JaffaCakes118
-
Size
634KB
-
MD5
628ffca0dfb674154e943617ec002414
-
SHA1
aaa2bf6fbc499c847d086cb940762d27ec388709
-
SHA256
17e0ffc31f7715024aa8f9c699daea8ca2a74cb1f29b391c6b377fd8afd7f7dc
-
SHA512
27baf159eff35439169543244735bfd060fb4d2334b309a8810be4e0892f307a335207789339e8ad613d58e5b86302160c8fa46e1a5648a409b5b1be960a6a77
-
SSDEEP
12288:u4U7FdSDWIjBEowDLFM9n23r+qTgZtbQxVuwtj+aZ7u32Q:u4Uij9enFMns+qslQ3PN+a9n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 628ffca0dfb674154e943617ec002414_JaffaCakes118
Files
-
628ffca0dfb674154e943617ec002414_JaffaCakes118.exe windows:4 windows x86 arch:x86
f876fa33f86e6dfad934747b04e7e738
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
GetLocaleInfoA
GetSystemDirectoryA
GetACP
GetFileAttributesA
GetCommandLineA
InterlockedExchange
GlobalAddAtomA
LockResource
VirtualProtect
LoadLibraryExA
GetStdHandle
Sleep
RaiseException
HeapCreate
GetLastError
GetLogicalDrives
CloseHandle
GlobalFree
GlobalDeleteAtom
EnterCriticalSection
user32
GetCursorPos
FrameRect
GetParent
ValidateRect
GetActiveWindow
wsprintfA
IsIconic
ReleaseDC
EndPaint
GetClassNameA
GetMenuItemInfoA
GetWindow
GetFocus
SetForegroundWindow
ShowWindow
DrawTextA
BeginPaint
DrawEdge
GetWindowTextA
httpapi
HttpRemoveUrl
HttpTerminate
HttpAddUrl
HttpInitialize
HttpCreateHttpHandle
wshtcpip
WSHNotify
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ