Static task
static1
Behavioral task
behavioral1
Sample
839a4d8c52244505e91816d03ea2eba4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
839a4d8c52244505e91816d03ea2eba4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
839a4d8c52244505e91816d03ea2eba4_JaffaCakes118
-
Size
207KB
-
MD5
839a4d8c52244505e91816d03ea2eba4
-
SHA1
5dd635216333744b8a22cb58afa37553508aaed2
-
SHA256
2034bf056f785ffadd8e8a421e7bbdc6fbdc3da1edb8f757fe56d34f61106ae4
-
SHA512
ed1e36a6b752359d74c8557cfa305170d6d1073845f16bf1dad9b3f691337797a5e16abfa0f205fa630f1b7b8b4b71992de78107bfbe11ded360779d514b28b7
-
SSDEEP
6144:vO5AL6FRP7sF9QdDhV/0tu2T5kSJofylwiwu8omSy:zL6zP7sMD/0t7xxLwd3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 839a4d8c52244505e91816d03ea2eba4_JaffaCakes118
Files
-
839a4d8c52244505e91816d03ea2eba4_JaffaCakes118.exe windows:4 windows x86 arch:x86
7e2b6869a320250ad223eab8b308b14b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
DuplicateHandle
OpenMutexW
CreateMutexW
GetTimeFormatW
InterlockedExchange
GetVolumeInformationW
GetCurrentProcessId
GetFileTime
GetModuleFileNameW
FindCloseChangeNotification
FindFirstChangeNotificationW
GetSystemTimeAsFileTime
FindNextFileW
SetUnhandledExceptionFilter
FindClose
FindFirstFileW
GetCurrentThreadId
WriteConsoleW
HeapFree
HeapAlloc
ReadFile
SetEndOfFile
FlushFileBuffers
LoadLibraryA
GetProcAddress
HeapReAlloc
CreatePipe
GetVersionExW
GetEnvironmentVariableW
GetShortPathNameW
PeekNamedPipe
GetProcessHeap
GetCurrentThread
VirtualAlloc
SetFilePointer
CreateFileA
CloseHandle
GetLastError
SetStdHandle
WideCharToMultiByte
GetModuleFileNameA
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
GetModuleHandleA
GetStartupInfoW
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
user32
SetWindowTextW
CallNextHookEx
CheckDlgButton
GetIconInfo
IsDialogMessageW
SendMessageW
gdi32
CreateRectRgn
GetPixel
PtVisible
CreateFontW
CreateCompatibleDC
SelectClipRgn
wininet
InternetSetStatusCallbackW
HttpQueryInfoW
InternetSetOptionExW
InternetWriteFile
InternetCrackUrlW
InternetOpenUrlW
InternetOpenW
InternetReadFile
HttpSendRequestW
InternetConnectW
HttpOpenRequestW
InternetCloseHandle
InternetCanonicalizeUrlW
InternetQueryDataAvailable
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 322KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ